From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 26 Feb 2007 22:03:01 +0000 (+0000)
Subject: Jose Kahan pointed out a Digest server that provided the algorith last in the
X-Git-Tag: curl-7_16_2~234
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7444342675a88adcd85145a702c222b71064466c;p=thirdparty%2Fcurl.git

Jose Kahan pointed out a Digest server that provided the algorith last in the
header line without quotes and with a CRLF immediately following...
---

diff --git a/lib/http_digest.c b/lib/http_digest.c
index c223784f91..604655f040 100644
--- a/lib/http_digest.c
+++ b/lib/http_digest.c
@@ -101,8 +101,8 @@ CURLdigest Curl_input_digest(struct connectdata *conn,
       if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"",
                       value, content)) ||
          /* try the same scan but without quotes around the content but don't
-            include the possibly trailing comma */
-         (2 ==  sscanf(header, "%31[^=]=%127[^,]",
+            include the possibly trailing comma, newline or carriage return */
+         (2 ==  sscanf(header, "%31[^=]=%127[^\r\n,]",
                        value, content)) ) {
         if(strequal(value, "nonce")) {
           d->nonce = strdup(content);