svn commit: r1935949 - httpd/httpd/trunk/modules/aaa

Author: jorton
Date: Mon Jul  6 12:51:50 2026
New Revision: 1935949

Log:
* modules/aaa/mod_auth_digest.c (get_digest_rec):
  Parse opaque more strictly.

GitHub: PR #661

Modified:
   httpd/httpd/trunk/modules/aaa/mod_auth_digest.c

Modified: httpd/httpd/trunk/modules/aaa/mod_auth_digest.c
==============================================================================
--- httpd/httpd/trunk/modules/aaa/mod_auth_digest.c	Mon Jul  6 12:51:39 2026	(r1935948)
+++ httpd/httpd/trunk/modules/aaa/mod_auth_digest.c	Mon Jul  6 12:51:50 2026	(r1935949)
@@ -950,7 +950,13 @@ static int get_digest_rec(request_rec *r
     }
 
     if (resp->opaque) {
-        resp->opaque_num = (unsigned long) strtol(resp->opaque, NULL, 16);
+        char *endptr;
+        long num;
+
+        errno = 0;
+        num = strtol(resp->opaque, &endptr, 16);
+        if (errno == 0 && *endptr == '\0' && num > 0)
+            resp->opaque_num = (unsigned long)num;
     }
 
     resp->auth_hdr_sts = VALID;