#4014: wrong string offset in HTTPCredentials::isNTLMCredentials

pocoproject · Jul 10, 2023 · a323b04 · a323b04
1 parent 5854c2d
commit a323b04
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,8 +1,9 @@
 This is the changelog file for the POCO C++ Libraries.
 
-Release 1.11.7 (2023-07-XX)
+Release 1.11.7 (2023-07-10)
 ===========================
 
+- GH #4014: wrong string offset in HTTPCredentials::isNTLMCredentials
 - GH #4071: PageCompiler: add referrerPolicy to page directive
 - GH #4077: OpenSSL 3: Don't throw if legacy provider is not available
 - GH #4078: Upgrade bundled SQLite to 3.42

diff --git a/Net/src/HTTPCredentials.cpp b/Net/src/HTTPCredentials.cpp
@@ -191,7 +191,7 @@ bool HTTPCredentials::isDigestCredentials(const std::string& header)
 
 bool HTTPCredentials::isNTLMCredentials(const std::string& header)
 {
-	return icompare(header, 0, 4, "NTLM") == 0 && (header.size() > 5 ? Poco::Ascii::isSpace(header[5]) : true);
+	return icompare(header, 0, 4, "NTLM") == 0 && (header.size() > 4 ? Poco::Ascii::isSpace(header[4]) : true);
 }