Blame SOURCES/0014-curl-7.29.0-8ae35102.patch

9d7d3f
From 8683703ef3978983e61329801aecc554aec06055 Mon Sep 17 00:00:00 2001
9d7d3f
From: Daniel Stenberg <daniel@haxx.se>
9d7d3f
Date: Tue, 7 Jan 2014 09:33:54 +0100
9d7d3f
Subject: [PATCH] ConnectionExists: fix NTLM check for new connection
9d7d3f
9d7d3f
When the requested authentication bitmask includes NTLM, we cannot
9d7d3f
re-use a connection for another username/password as we then risk
9d7d3f
re-using NTLM (connection-based auth).
9d7d3f
9d7d3f
This has the unfortunate downside that if you include NTLM as a possible
9d7d3f
auth, you cannot re-use connections for other usernames/passwords even
9d7d3f
if NTLM doesn't end up the auth type used.
9d7d3f
9d7d3f
Reported-by: Paras S
9d7d3f
Patched-by: Paras S
9d7d3f
Bug: http://curl.haxx.se/mail/lib-2014-01/0046.html
9d7d3f
9d7d3f
[upstream commit 8ae35102c43d8d06572c3a1292eb6e27e663c78d]
9d7d3f
9d7d3f
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
9d7d3f
---
9d7d3f
 lib/url.c |    4 ++--
9d7d3f
 1 files changed, 2 insertions(+), 2 deletions(-)
9d7d3f
9d7d3f
diff --git a/lib/url.c b/lib/url.c
9d7d3f
index bddbd91..313ec3e 100644
9d7d3f
--- a/lib/url.c
9d7d3f
+++ b/lib/url.c
9d7d3f
@@ -2782,8 +2782,8 @@ ConnectionExists(struct SessionHandle *data,
9d7d3f
   struct connectdata *check;
9d7d3f
   struct connectdata *chosen = 0;
9d7d3f
   bool canPipeline = IsPipeliningPossible(data, needle);
9d7d3f
-  bool wantNTLM = (data->state.authhost.want==CURLAUTH_NTLM) ||
9d7d3f
-                  (data->state.authhost.want==CURLAUTH_NTLM_WB) ? TRUE : FALSE;
9d7d3f
+  bool wantNTLM = (data->state.authhost.want & CURLAUTH_NTLM) ||
9d7d3f
+    (data->state.authhost.want & CURLAUTH_NTLM_WB) ? TRUE : FALSE;
9d7d3f
   struct connectbundle *bundle;
9d7d3f
 
9d7d3f
   /* Look up the bundle with all the connections to this
9d7d3f
-- 
9d7d3f
1.7.1
9d7d3f