www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-10 02:02:49 +03:00
Code Activity

bubble up an error if none of the passhrases work

Browse Source 
previously, the un-decodable z->encoded would get set to NULL
but success would be returned




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1874674 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Eric Covener
2020-03-01 22:40:03 +00:00
parent 2c8a4fe01c
commit bef4205da3
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/session/mod_session_crypto.c
View File

@@ -391,6 +391,8 @@ static apr_status_t decrypt_string(request_rec * r, const apr_crypto_t *f,
return res; return res;
} }
res = APR_ECRYPT; /* in case we exhaust all passphrases */
/* try each passphrase in turn */ /* try each passphrase in turn */
for (; i < dconf->passphrases->nelts; i++) { for (; i < dconf->passphrases->nelts; i++) {
const char *passphrase = APR_ARRAY_IDX(dconf->passphrases, i, char *); const char *passphrase = APR_ARRAY_IDX(dconf->passphrases, i, char *);