components/lighttpd/patches/CVE-2015-3200.patch
author Petr Sumbera <petr.sumbera@oracle.com>
Tue, 26 May 2015 06:49:06 -0700
changeset 4350 513380f66f7f
permissions -rw-r--r--
21146442 problem in UTILITY/LIGHTTPD

Patch origin: in-house
Patch status: submitted to upstream

http://redmine.lighttpd.net/issues/2646

--- src/http_auth.c
+++ src/http_auth.c
@@ -857,7 +857,7 @@
 
 	/* r2 == user:password */
 	if (NULL == (pw = strchr(username->ptr, ':'))) {
-		log_error_write(srv, __FILE__, __LINE__, "sb", ": is missing in", username);
+		log_error_write(srv, __FILE__, __LINE__, "s", ": is missing in decoded base64-string");
 
 		buffer_free(username);
 		return 0;