Bug#392005: neon26: typing mistake in src/ne_auth.c: logical and used where bitwise expected

[Helmut Grohne]

Package: neon26
Version: 0.26.1-1
Severity: minor
Tags: patch upstream


Debian: src/ne_auth.c:1358
Upstream tarball from http://www.webdav.org/neon/: src/ne_auth.c:1204:

    else if (sess->protocol
             && sess->protocol->flags && AUTH_FLAG_VERIFY_NON40x
             && (status->klass == 2 || status->klass == 3)
             && auth_hdr) {
        ret = sess->protocol->verify(areq, sess, auth_hdr);
    }

flags && AUTH_FLAG_VERIFY_NON40x is typing mistake and should be
corrected to bitwise and, as it could lead to unexpected behaviour or a
security hole.

Helmut Grohne

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

signature.asc
Description: Digital signature