Modify ↓

Opened 7 years ago

Closed 7 years ago

Last modified 4 years ago

#8513 closed defect (fixed)

uhttpd http header field processing is not case insensitive

Reported by: anonymous Owned by: developers
Priority: normal Milestone: Barrier Breaker 14.07
Component: packages Version: Trunk
Keywords: uhttpd Cc:

Description

uhttpd.c contains in function uh_http_header_parse the isupper case checking routine:

else if( !hdrname && isalpha(buffer[i]) && isupper(buffer[i]) )

This causes header fields like:

authorization: Basic Zm9vOmJhcg==

to fail when doing basic auth on some clients.

Attachments (0)

Change History (2)

comment:1 Changed 7 years ago by jow

  • Resolution set to fixed
  • Status changed from new to closed

Fixed in r24823 (trunk) and r24824 (backfire). Thanks for reporting.

comment:2 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.