github-repos/wget
1
0
Fork 0
mirror of https://github.com/mirror/wget.git synced 2025-01-03 00:40:28 +08:00
Code Issues Packages Projects Releases Wiki Activity

* src/http.c (check_auth): Remove use of alloca

Browse Source
This commit is contained in:
Tim Rühsen 2020-02-13 16:27:38 +01:00
parent 68868bbb37
commit cbea3d41dd
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
src/http.c
View File

@ -2387,26 +2387,40 @@ check_auth (const struct url *u, char *user, char *passwd, struct response *resp
bool basic_auth_finished = *basic_auth_finished_ref;
bool auth_finished = *auth_finished_ref;
bool ntlm_seen = *ntlm_seen_ref;
char buf[256], *tmp = NULL;
*retry = false;
if (!auth_finished && (user && passwd))
{
/* IIS sends multiple copies of WWW-Authenticate, one with
the value "negotiate", and other(s) with data. Loop over
all the occurrences and pick the one we recognize. */
int wapos;
char *buf;
const char *www_authenticate = NULL;
const char *wabeg, *waend;
const char *digest = NULL, *basic = NULL, *ntlm = NULL;
for (wapos = 0; !ntlm
&& (wapos = resp_header_locate (resp, "WWW-Authenticate", wapos,
&wabeg, &waend)) != -1;
++wapos)
{
param_token name, value;
size_t len = waend - wabeg;
BOUNDED_TO_ALLOCA (wabeg, waend, buf);
www_authenticate = buf;
if (tmp != buf)
xfree (tmp);
if (len < sizeof (buf))
tmp = buf;
else
tmp = xmalloc (len + 1);
memcpy (tmp, wabeg, len);
tmp[len] = 0;
www_authenticate = tmp;
for (;!ntlm;)
{
@ -2507,6 +2521,8 @@ check_auth (const struct url *u, char *user, char *passwd, struct response *resp
}
cleanup:
if (tmp != buf)
xfree (tmp);
*ntlm_seen_ref = ntlm_seen;
*basic_auth_finished_ref = basic_auth_finished;
*auth_finished_ref = auth_finished;