]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5b0bc00) | patch
BUG/MINOR: jwe: only match the exact "ALL" word in jwt.decrypt_{alg,enc}_list
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Tue, 20 Oct 2026 08:04:49 +0000 (10:04 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 21 Oct 2026 15:43:19 +0000 (17:43 +0200)
commit59366ef447aa73ed883d5b4aa66bfc4419412ad0
tree2603816a55730e352d0b011885c422682d1c80a2tree | snapshot
parent5b0bc00d5cae843b00c262335d88c47b45f9b5d9commit | diff
BUG/MINOR: jwe: only match the exact "ALL" word in jwt.decrypt_{alg,enc}_list

The parsing of the special 'ALL' case in "jwt.decrypt_alg_list" and
"jwt.decrypt_enc_list" did not check the actual string length so a too
short string could be wrongly treated as 'ALL'.

This was introduced in 3.4 by commit f82a242c8 ("MINOR: jwe: Add option to
enable/disable algorithms or encryption algorithms for jwt_decrypt"), so
the fix must be backported to 3.4.
src/jwe.c diff | blob | history
haproxy upstream