Skip to content

Fix check of no realm in username #148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 11, 2025
Merged

Fix check of no realm in username #148

merged 2 commits into from
May 11, 2025

Conversation

simayosi
Copy link
Contributor

Since headers_in.user.data is not terminated by NUL, p is not NULL for a no-realm username if the password contains '@'.
This patch fixes it by replacing ngx_strchr with ngx_strlchr.

@simayosi
Copy link
Contributor Author

I would explain directly why my patch is needed.
The current implementation doesn't work correctly for any user whose password contains '@'.

Alphix added a commit to Alphix/spnego-http-auth-nginx-module that referenced this pull request May 11, 2025
This will break the CI (cf. pull request stnoonan#148)
@Alphix Alphix merged commit 3cdd797 into stnoonan:main May 11, 2025
@Alphix
Copy link
Collaborator

Alphix commented May 11, 2025

LGTM, thanks, merged, there's one more place that need to be fixed. I'll push a separate patch for that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants