From 1edbb7b83d9b09ff4d6b0e37d951f237a9517810 Mon Sep 17 00:00:00 2001 From: Remi Tricot-Le Breton Date: Thu, 15 Oct 2026 16:42:36 +0200 Subject: [PATCH] BUG/MINOR: sample: Fix wrong 'base64urldec' return value check in 'jwt_member_query' The 'base64urldec' function return value was only checked against -1 when it can also return -2 in case of error (too small out buffer). This was raised in GitHub issue #3510. This patch can be backported to all stable branches. --- src/sample.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sample.c b/src/sample.c index c34f143a8..7f2a93df6 100644 --- a/src/sample.c +++ b/src/sample.c @@ -5072,7 +5072,7 @@ static int sample_conv_jwt_member_query(const struct arg *args, struct sample *s ret = base64urldec(items[member].start, items[member].length, decoded_header->area, decoded_header->size); - if (ret == -1) + if (ret < 0) goto end; /* mjson might return an embedded \0 that is not valid as a string */ -- 2.47.3