Blame SOURCES/httpd-2.4.25-CVE-2017-9788.patch

760d5c
diff --git a/modules/aaa/mod_auth_digest.c b/modules/aaa/mod_auth_digest.c
760d5c
index c22bb09..d391559 100644
760d5c
--- a/modules/aaa/mod_auth_digest.c
760d5c
+++ b/modules/aaa/mod_auth_digest.c
760d5c
@@ -965,13 +965,13 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
760d5c
 
760d5c
         /* find value */
760d5c
 
760d5c
+        vv = 0;
760d5c
         if (auth_line[0] == '=') {
760d5c
             auth_line++;
760d5c
             while (apr_isspace(auth_line[0])) {
760d5c
                 auth_line++;
760d5c
             }
760d5c
 
760d5c
-            vv = 0;
760d5c
             if (auth_line[0] == '\"') {         /* quoted string */
760d5c
                 auth_line++;
760d5c
                 while (auth_line[0] != '\"' && auth_line[0] != '\0') {
760d5c
@@ -990,8 +990,8 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
760d5c
                     value[vv++] = *auth_line++;
760d5c
                 }
760d5c
             }
760d5c
-            value[vv] = '\0';
760d5c
         }
760d5c
+        value[vv] = '\0';
760d5c
 
760d5c
         while (auth_line[0] != ',' && auth_line[0] != '\0') {
760d5c
             auth_line++;