components/lighttpd/patches/CVE-2015-3200.patch
changeset 5738 fc0e1d002c9e
parent 5737 6ccbf34f1588
child 5739 da905fdd7f4a
equal deleted inserted replaced
5737:6ccbf34f1588 5738:fc0e1d002c9e
     1 Patch origin: in-house
       
     2 Patch status: submitted to upstream
       
     3 
       
     4 http://redmine.lighttpd.net/issues/2646
       
     5 
       
     6 --- src/http_auth.c
       
     7 +++ src/http_auth.c
       
     8 @@ -857,7 +857,7 @@
       
     9  
       
    10  	/* r2 == user:password */
       
    11  	if (NULL == (pw = strchr(username->ptr, ':'))) {
       
    12 -		log_error_write(srv, __FILE__, __LINE__, "sb", ": is missing in", username);
       
    13 +		log_error_write(srv, __FILE__, __LINE__, "s", ": is missing in decoded base64-string");
       
    14  
       
    15  		buffer_free(username);
       
    16  		return 0;