dualfroz 9c455501a7 http_auth: fix NULL dereference on missing Digest response values ...

A server could reply with an Authentication-Info header carrying a
cnonce but no rspauth, which was passed to strcmp() as NULL. Treat a
missing rspauth as an authentication failure, and do not compare the
cnonce against a client nonce that was never generated.

Fixes #30043

2026-10-13 23:02:54 +02:00

..

http_auth.c

http_auth: fix NULL dereference on missing Digest response values

2026-10-13 23:02:54 +02:00