Bug 30050

Summary: Authentication with invalid/unknown Header crash Browser
Product: WebKit Reporter: Andreas <gmblar>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED INVALID    
Severity: Critical CC: mrowe
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Mac (Intel)   
OS: OS X 10.6   
URL: http://username:password@www.blar.de/webkit/auth.php

Description Andreas 2009-10-03 16:11:35 PDT
Authentication with invalid/unknown values in Header "WWW-Authenticate" crash Browser

Code
<?php

header('HTTP/1.1 401 Unauthorized');
header('WWW-Authenticate: Basic Invalid');

?>

Example: http://username:password@www.blar.de/webkit/auth.php
Comment 1 Mark Rowe (bdash) 2009-10-03 22:33:19 PDT
Thanks for the bug report.  However, the crash log indicates that the problem occurs outside of WebKit in a Mac OS X system framework that it uses.  You should report this bug to Apple at <http://bugreport.apple.com/> so it can be investigated.

This bug report will be closed as INVALID to indicate that the problem is outside of WebKit.