cURL / Mailing Lists / curl-library / Single Mail

curl-library

Bug in libcurl

From: Jorge Lodos Vigil <lodos_at_segurmatica.cu>
Date: Thu, 10 Nov 2011 16:48:41 +0000

Hi
There is a bug in libcurl when more than one authentication constant is specified for proxy connections (probably for server as well but I didn't test).
The output_auth_headers function expects only one authentication constant in authstatus->picked but the whole bitmask is received. It uses operator == and not operator &, no it does not find any valid authentication method.
This problem was detected in Windows 7 with ISA Server 2006, curl version 7.22.0 and setting proxy authentication as CURLAUTH_GSSNEGOTIATE | CURLAUTH_NTLM.
It seems that output_auth_headers works as designed, but it is not being used that way. My first reaction is to modify output_auth_headers, but I thought it was healthy to ask here first.
This problem is not in the list of known bugs.
Thank you.

Best regards
Jorge

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-11-10