923154 - Incorrect parsing of DIGEST-MD5 quoted strings

Status: RESOLVED DUPLICATE of bug 817596

(Thunderbird :: Instant Messaging, defect)

Description

[Matthew Wild]

User Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/28.0.1500.71 Chrome/28.0.1500.71 Safari/537.36

Steps to reproduce:

Attempt to log into jabber.org's XMPP service using Thunderbird 24 (code suggests the issue is present in trunk, but this is not confirmed by testing yet).


Actual results:

Authentication failed. The error console shows:

Error: Error decoding: nonce="ioL1IIvx4A0igSEO/X3PWZ+mweRBap/9an9Exhy2aoc=" Source File: resource:///modules/xmpp-session.jsm Line: 349 Source Code: prpl-jabber


Expected results:

The source of the bug appears to be the way _generateResponse splits the string in xmpp-authmechs.jsm, which doesn't account for the '=' character occuring in the quoted string.

RFC 2831 says:

      nonce             = "nonce" "=" <"> nonce-value <">
      nonce-value       = qdstr-val
      quoted-string  = ( <"> qdstr-val <"> )
      qdstr-val      = *( qdtext | quoted-pair )
      qdtext         = <any TEXT except <">>

Comment 1

[Florian Quèze [:florian]]

Thanks for the report. Someone already reported in bug 817596 the same issue when attempting to connect to jabber.ubuntu-fr.org.