Page MenuHomeFreeBSD

libfetch: Pass a zeroed digest to DigestCalcResponse.
ClosedPublic

Authored by jhb on Sep 29 2022, 10:36 PM.
Tags
None
Referenced Files
F115709834: D36825.diff
Sun, Apr 27, 11:59 AM
F115688413: D36825.diff
Sun, Apr 27, 4:14 AM
Unknown Object (File)
Mon, Apr 14, 5:41 AM
Unknown Object (File)
Mar 17 2025, 3:32 PM
Unknown Object (File)
Mar 13 2025, 3:33 PM
Unknown Object (File)
Mar 8 2025, 12:42 PM
Unknown Object (File)
Mar 5 2025, 2:22 PM
Unknown Object (File)
Mar 2 2025, 11:02 PM
Subscribers

Details

Summary

GCC 12 warns that passing "" (a constant of char[1]) to a parameter of
type char[33] could potentially overread. It is not clear from the
context that c->qops can never be "auth-int" (and if it can't, then
the "auth-int" handling in DigestCalcResponse is dead code that should
be removed since this is the only place the function is called).

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 47639
Build 44526: arc lint + arc unit

Event Timeline

jhb requested review of this revision.Sep 29 2022, 10:36 PM

LGTM, hopefully @des can offer some insight on the auth-int issue.

This revision is now accepted and ready to land.Sep 30 2022, 2:24 PM
des added a subscriber: grembo.

This is @grembo's code.

In D36825#836513, @des wrote:

This is @grembo's code.

@des Thanks for adding me to the review, but the code for HTTP digest authentication was contributed by Jean-Francois Dockes <jf@dockes.org> (I contributed code in the area of TLS and certificates).