package/busybox: wget: URL-decode user:password before base64-encoding it into auth...

[openwrt/svn-archive/archive.git] / package / busybox / patches / 310-passwd_access.patch

diff --git a/package/busybox/patches/310-passwd_access.patch b/package/busybox/patches/310-passwd_access.patch
index 78a43d7782dfd4cb957984379dcfd04a72cd3788..b995599de7f1ad9c85074634cbcd3c9348f2e9b4 100644 (file)
--- a/package/busybox/patches/310-passwd_access.patch
+++ b/package/busybox/patches/310-passwd_access.patch
@@ -3,7 +3,7 @@
 
 --- a/networking/httpd.c
 +++ b/networking/httpd.c
-@@ -1697,21 +1697,32 @@
+@@ -1700,21 +1700,32 @@ static int check_user_passwd(const char 
  
                if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
                        char *md5_passwd;
@@ -17,7 +17,7 @@
 +
 +                              pwd = getpwnam(&md5_passwd[4]);
 +                              if(!pwd->pw_passwd || !pwd->pw_passwd[0] || pwd->pw_passwd[0] == '!')
-+                                      continue;
++                                      return 1;
 +
 +                              md5_passwd = pwd->pw_passwd;
 +                              goto check_md5_pw;