wt/mongoose
1
0 Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-11-07 16:01:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix WS handshake nonce generation

Browse Source 
PUBLISHED_FROM=ae8d436db9aee9aec7b5ac1cbee6bc4e32d8c6cf
This commit is contained in:
Deomid Ryabkov authored and Cesanta Bot committed 2016-09-22 16:05:38 +00:00
1 parent 13e80e6bd5
commit abbd44e276
1 file changed
+7 -4
Download Patch File Download Diff File Expand all files Collapse all files
mongoose.c
+7 -4
View File
@@ -5228,11 +5228,14 @@ void mg_set_protocol_http_websocket(struct mg_connection *nc) {
void mg_send_websocket_handshake2(struct mg_connection *nc, const char *path, void mg_send_websocket_handshake2(struct mg_connection *nc, const char *path,
const char *host, const char *protocol, const char *host, const char *protocol,
const char *extra_headers) { const char *extra_headers) {
/* pretty poor source of randomness, TODO fix */ char key[25];
unsigned long random = (unsigned long) (uintptr_t) path; uint32_t nonce[4];
char key[sizeof(random) * 3]; nonce[0] = mg_ws_random_mask();
nonce[1] = mg_ws_random_mask();
nonce[2] = mg_ws_random_mask();
nonce[3] = mg_ws_random_mask();
mg_base64_encode((unsigned char *) &nonce, sizeof(nonce), key);
mg_base64_encode((unsigned char *) &random, sizeof(random), key);
mg_printf(nc, mg_printf(nc,
"GET %s HTTP/1.1\r\n" "GET %s HTTP/1.1\r\n"
"Upgrade: websocket\r\n" "Upgrade: websocket\r\n"