GNOME Bugzilla – Bug 602898
nonce-count header is interpreted incorrectly
Last modified: 2010-08-26 00:05:52 UTC
According to RFC2617 section 3.2.2: "The nc-value is the hexadecimal count of the number of requests (including the current request) that the client has sent with the nonce value in this request." However, in libsoup/soup-auth-domain-digest.c, function check_hex_urp, file line 306, the function atoi() is called against the client-provided value, performing a decimal conversion.
fixed in git master, will go into 2.28.2 in a few weeks. thanks
OK, this filtered down into my distro and I can confirm it works. Thanks!