[Webkit-unassigned] [Bug 170055] htdigestparser fails out early when malformed entries are found

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Mar 24 09:51:57 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=170055

--- Comment #6 from Lucas Forschler <lforschler at apple.com> ---
(In reply to Lucas Forschler from comment #5)
> This  problem occurred when we moved to an updated database on the new DB
> server. Previously, I believe the malformed entries were not exported, or
> possibly there was some flaw that allowed them to pass through.
> 
> As it currently works, we never finish parsing the entries. If you are lucky
> enough to have your credentials in the list before any malformed entry, then
> you can log in. 
> 
> One could argue the solution would be to clean up the database of any
> malformed entries... but that would not prevent a new one from being created.

Actually, I misspoke. With the in place logic, if we run into a malformed entry, we simply bail out... no one can authenticate, as no entries are returned to validate.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170324/2ca56f82/attachment.html>


More information about the webkit-unassigned mailing list