Guenter <lists <at> gknw.net> writes:

> does this mean that even though you dont use SSPI just the fact that it
> is compiled-in triggers already the leak?

Yes, we do not "actively" use NTLM, but I think this happens automatically if a
webserver returns Response-Code 407 or something like that.

> Also if its not too big a burdon can you please check if 7.21.7 has that
> leak or not? This way we can perhaps rule out any changes from .2 to .7 ...

I can't do that on the machine were I spotted the leak, because that's our
production server. In 7.21.7 there was a crash-bug when Http-Server returned
407, why we can't use that version either.
If I find some time I try to write a test-program to reproduce this issue, but
probably it is reproducible when Http-Server returns Status-Code 407.

Regards,

Christian

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-09-21