search

kristapsdz / kcgi

minimal CGI and FastCGI library for C/C++
https://kristaps.bsd.lv/kcgi
ISC License
275 stars 40 forks source link

kauth_count does not handle hexadecimal nonce-counts #41

Closed mk-f closed 6 years ago

mk-f commented 6 years ago

Introduced by 0a773fe4b0b967227b094fee9c290bcd7d7606bb as strtonum handles base10 only.

This results in miscalculated digest if the nonce-count is bigger than 9, as kauth_count defaults to zero when strtonum fails.