[Bug 42465] New: winhttp set_cookies() violates RFC6265 string comparison rules

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=42465

            Bug ID: 42465
           Summary: winhttp set_cookies() violates RFC6265 string
                    comparison rules
           Product: Wine
           Version: 2.0
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: winhttp
          Assignee: wine-bugs at winehq.org
          Reporter: idfred at gmail.com
      Distribution: ---

For example, RFC6265 section 5.2.4 states:
>   If the attribute-name case-insensitively matches the string "Path",
>   the user agent MUST process the cookie-av as follows.

But set_cookies() uses string "path" and performs case-sensitive comparison.
Same stuff with section 5.2.3 and string "domain".

This issue breaks cookie exchange with certain HTTP servers.

Probably there are other similar issues in Wine since HTTP string processing
should be case-insensitive in most cases. And most server implementations use
Camel-Case strings.

This issue also affects Wine versions prior to 2.0.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.