GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-14 02:22:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

more complete http body handling

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2013-02-23 09:59:02 +01:00
parent 82db04ad4d
commit d2df8a3e4f
3 changed files with 43 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/worker-auth.c
+6 -6
View File
@@ -344,7 +344,7 @@ struct cmd_auth_cookie_req_st areq;
int post_old_auth_handler(worker_st *ws)
{
int ret;
struct req_data_st *req = &ws->req;
struct http_req_st *req = &ws->req;
const char* reason = "Authentication failed";
char str_cookie[2*COOKIE_SIZE+1];
char * username = NULL;
@@ -357,14 +357,14 @@ struct cmd_auth_req_st areq;
if (ws->config->auth_types & AUTH_TYPE_USERNAME_PASS) {
/* body should be "username=test&password=test" */
username = strstr(req->body, "username=");
username = memmem(req->body, req->body_length, "username=", sizeof("username=")-1);
if (username == NULL) {
reason = "No username";
goto auth_fail;
}
username += sizeof("username=")-1;
password = strstr(req->body, "password=");
password = memmem(req->body, req->body_length, "password=", sizeof("password=")-1);
if (password == NULL) {
reason = "No password";
goto auth_fail;
@@ -464,7 +464,7 @@ auth_fail:
int post_new_auth_handler(worker_st *ws)
{
int ret;
struct req_data_st *req = &ws->req;
struct http_req_st *req = &ws->req;
const char* reason = "Authentication failed";
char str_cookie[2*COOKIE_SIZE+1];
char * username = NULL;
@@ -477,14 +477,14 @@ struct cmd_auth_req_st areq;
if (ws->config->auth_types & AUTH_TYPE_USERNAME_PASS) {
/* body should contain <username>test</username><password>test</password> */
username = strstr(req->body, XMLUSER);
username = memmem(req->body, req->body_length, XMLUSER, sizeof(XMLUSER)-1);
if (username == NULL) {
reason = "No username";
goto ask_auth;
}
username += sizeof(XMLUSER)-1;
password = strstr(req->body, XMLPASS);
password = memmem(req->body, req->body_length, XMLPASS, sizeof(XMLPASS)-1);
if (password == NULL) {
reason = "No password";
goto auth_fail;