components/lighttpd/patches/CVE-2015-3200.patch
author Petr Sumbera <petr.sumbera@oracle.com>
Tue, 26 May 2015 06:49:06 -0700
changeset 4350 513380f66f7f
permissions -rw-r--r--
21146442 problem in UTILITY/LIGHTTPD
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
4350
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     1
Patch origin: in-house
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     2
Patch status: submitted to upstream
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     3
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     4
http://redmine.lighttpd.net/issues/2646
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     5
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     6
--- src/http_auth.c
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     7
+++ src/http_auth.c
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     8
@@ -857,7 +857,7 @@
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
     9
 
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    10
 	/* r2 == user:password */
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    11
 	if (NULL == (pw = strchr(username->ptr, ':'))) {
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    12
-		log_error_write(srv, __FILE__, __LINE__, "sb", ": is missing in", username);
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    13
+		log_error_write(srv, __FILE__, __LINE__, "s", ": is missing in decoded base64-string");
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    14
 
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    15
 		buffer_free(username);
513380f66f7f 21146442 problem in UTILITY/LIGHTTPD
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff changeset
    16
 		return 0;