[Asterisk-code-review] manager: fix digest auth for ami/http mechanism. (asterisk[master])

Joshua Colp asteriskteam at digium.com
Tue May 8 06:00:31 CDT 2018


Joshua Colp has posted comments on this change. ( https://gerrit.asterisk.org/8938 )

Change subject: manager: fix digest auth for ami/http mechanism.
......................................................................


Patch Set 2: Code-Review-1

(1 comment)

https://gerrit.asterisk.org/#/c/8938/2//COMMIT_MSG
Commit Message:

https://gerrit.asterisk.org/#/c/8938/2//COMMIT_MSG@9
PS2, Line 9: Given that the a2 buffer ends up containing the user-supplied uri value
This is too technical and low level in my opinion. This gives a better clue:

Due to a fixed size buffer the digest authentication could be incorrectly calculated if a large URI was provided, causing authentication failure. The buffer is now dynamically allocated to allow any size URI within the normal limits of the HTTP request size.



-- 
To view, visit https://gerrit.asterisk.org/8938
To unsubscribe, visit https://gerrit.asterisk.org/settings

Gerrit-Project: asterisk
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I660609db13b8f9e5f9567f339dd804f4985d41b3
Gerrit-Change-Number: 8938
Gerrit-PatchSet: 2
Gerrit-Owner: Jaco Kroon <jaco at uls.co.za>
Gerrit-Reviewer: Corey Farrell <git at cfware.com>
Gerrit-Reviewer: Jenkins2
Gerrit-Reviewer: Joshua Colp <jcolp at digium.com>
Gerrit-Comment-Date: Tue, 08 May 2018 11:00:31 +0000
Gerrit-HasComments: Yes
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-code-review/attachments/20180508/39a694a0/attachment.html>


More information about the asterisk-code-review mailing list