http://redmine.lighttpd.net/issues/2370

--- src/http_auth.c	Thu Jun 11 03:05:06 2009
+++ src/http_auth.c	Mon Mar  5 08:26:05 2012
@@ -93,7 +93,7 @@
 	ch = in[0];
 	/* run through the whole string, converting as we go */
 	for (i = 0; i < in_len; i++) {
-		ch = in[i];
+		ch = (unsigned char) in[i];
 
 		if (ch == '\0') break;