diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2026-03-18 16:39:37 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2026-03-24 22:33:23 +0400 |
| commit | 0f71dd8ea94ab8c123413b2e465be12a35392e9c (patch) | |
| tree | 9f426e49858ca3a6239f6cb1967eccf2eb6ce259 /src/misc/ngx_cpp_test_module.cpp | |
| parent | 6a8513761fb327f67fcc6cfcf1ad216887e2589f (diff) | |
| download | nginx-0f71dd8ea94ab8c123413b2e465be12a35392e9c.tar.gz nginx-0f71dd8ea94ab8c123413b2e465be12a35392e9c.tar.bz2 | |
Mail: fixed clearing s->passwd in auth http requests.
Previously, it was not properly cleared retaining length as part of
authenticating with CRAM-MD5 and APOP methods that expect to receive
password in auth response. This resulted in null pointer dereference
and worker process crash in subsequent auth attempts with CRAM-MD5.
Reported by Arkadi Vainbrand.
Diffstat (limited to 'src/misc/ngx_cpp_test_module.cpp')
0 files changed, 0 insertions, 0 deletions