From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 14 Nov 2025 22:00:05 +0000 (+0100)
Subject: curl_sasl: make Curl_sasl_decode_mech compare case insenstively
X-Git-Tag: rc-8_18_0-1~271
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b3d4f17e3d902b70a4967e1fa9fc574c1cac676d;p=thirdparty%2Fcurl.git

curl_sasl: make Curl_sasl_decode_mech compare case insenstively

The provided mechanisms should be compared case insenstively.

Found by ZeroPath

Closes #19535
---

diff --git a/lib/curl_sasl.c b/lib/curl_sasl.c
index b04e958268..1c9f259de4 100644
--- a/lib/curl_sasl.c
+++ b/lib/curl_sasl.c
@@ -96,7 +96,7 @@ unsigned short Curl_sasl_decode_mech(const char *ptr, size_t maxlen,
 
   for(i = 0; mechtable[i].name; i++) {
     if(maxlen >= mechtable[i].len &&
-       !memcmp(ptr, mechtable[i].name, mechtable[i].len)) {
+       curl_strnequal(ptr, mechtable[i].name, mechtable[i].len)) {
       if(len)
         *len = mechtable[i].len;