You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/09/01 10:10:33 UTC

[Bug 60075] segmentation fault during a false request

https://bz.apache.org/bugzilla/show_bug.cgi?id=60075

--- Comment #1 from Petr Gajdos <pg...@suse.cz> ---
(In reply to Petr Gajdos from comment #0)
> Unfortunately I have not learned the aim of the opaque code in
> note_digest_auth_failure() to be able to think about a patch. When I run
> just:
> 
> $ curl -i http://localhost:60080/index.html
> 
> I got 401 correctly but gen_client()/add_client() is not called at all.
> During the first curl command (with the opaque= in the header) these two are
> called.

In other words: if you look at example flow (run.sh) in:

https://github.com/pgajdos/apache-rex/tree/master/mod_auth_digest-Authorization

There is 'opaque=' parameter nowhere in 'Authentication-Info' header in
200-response. So I am just not sure when opaque= (~ number of client here?)
parameter is sent to client; note_digest_auth_failure()'s code seems to heavily
depend on its value trough resp->opaque, which is set only while parsing
Authorization: header, if I understand correctly.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org