cURL / Mailing Lists / curl-users / Single Mail

curl-users

RE: authentification fail with password larger than 127 char

From: Jack Rong <jack.rong_at_cloakware.com>
Date: Fri, 16 Dec 2005 09:33:15 -0500

Anybody know how I remove my name from the email list.

Thanks.

Jack

-----Original Message-----
From: curl-users-bounces_at_cool.haxx.se
[mailto:curl-users-bounces_at_cool.haxx.se]On Behalf Of Daniel Stenberg
Sent: Friday, December 16, 2005 5:53 AM
To: the curl tool
Subject: Re: authentification fail with password larger than 127 char

On Fri, 16 Dec 2005, Jean Jacques Drouin wrote:

> The trace analysis from ethereal shows that - with cURL - only the 127
first
> characters of the password are base64 encoded and sent to the server. My
> password is greater than 127 characters!
>
> I've tried with various lengths of <user>, <filename>.. to see if the
limit
> was for the password itself or for the global url length: cURL always
takes
> 127 chars of the sole password.
>
> I've not seen something related to such limit in the doc.

Yes indeed, the current code seems to restrict the length to 127 bytes. It
is
actually a plain mistake since it keeps a buffer to store up to 255 bytes...

You up to fix it and send us a patch?

--
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
Received on 2005-12-16