[vlc-devel] [PATCH] Fix Basic Digest Auth

Thomas Guillem thomas at gllm.fr
Mon Oct 19 14:23:51 CEST 2020



On Mon, Oct 19, 2020, at 14:13, Rémi Denis-Courmont wrote:
> Le perjantaina 16. lokakuuta 2020, 22.49.25 EEST Maxim De Clercq a écrit :
> > *Commit message*
> > Revert: old http: fix leak on reconnect
> > 
> > Do not reinitialized the auth state machine at every connection because it
> > breaks digest authentication.
> 
> If I have to choose between leaking all the time, and breaking useless 
> insecure legacy digest authentication, I pick breaking digest.
> 
Maybe not all VLC developers would choose that path (because VLC should play everything).

Is there a possibility to fix it without leaking?

> -- 
> 雷米‧德尼-库尔蒙
> http://www.remlab.net/
> 
> 
> 
> _______________________________________________
> vlc-devel mailing list
> To unsubscribe or modify your subscription options:
> https://mailman.videolan.org/listinfo/vlc-devel


More information about the vlc-devel mailing list