commit c7a972e8f457a79baf23a32791da60cf9ca879dd
author Mark Thomas <markt@apache.org> Wed May 30 10:10:36 2018 +0000
committer Mark Thomas <markt@apache.org> Wed May 30 10:10:36 2018 +0000
tree 1e5ae697bf56ec25ff7ed176ec5dbbaad2f25c03
parent cc2773516de07b5ec83940bbb43071c3908b0c66

Correctly handle a digest authorization header when the user name contains an escaped character.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/tc8.0.x/trunk@1832529 13f79535-47bb-0310-9956-ffa450edef68

java/org/apache/tomcat/util/http/parser/HttpParser.java

diff --git a/java/org/apache/tomcat/util/http/parser/HttpParser.java b/java/org/apache/tomcat/util/http/parser/HttpParser.java
index 2affd0c..64497a5 100644
--- a/java/org/apache/tomcat/util/http/parser/HttpParser.java
+++ b/java/org/apache/tomcat/util/http/parser/HttpParser.java
@@ -429,7 +429,7 @@
                 if (returnQuoted) {
                     result.append('\\');
                 }
-                result.append(c);
+                result.append((char) c);
             } else {
                 result.append((char) c);
             }

webapps/docs/changelog.xml

diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 16c519c..8046dba 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -123,6 +123,10 @@
       <fix>
         <bug>62371</bug>: Improve logging of Host validation failures. (markt)
       </fix>
+      <fix>
+        Correctly handle a digest authorization header when the user name
+        contains an escaped character. (markt)
+      </fix>
     </changelog>
   </subsection>
   <subsection name="Jasper">