[cups.bugs] [HIGH] STR #2692: "DefaultAuthType" in cupsd.conf is set "1" by admin cgi-bin

[Osamu Mihara]

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

OS: NetBSD 4.0/amd64
GCC: 4.1.2

(1) Open https://localhost:631/admin/
(2) Change anything in Basic Server Settings
(3) Press "Change Settings"

This operation updates cupsd.conf, but cupsd terminates because
"DefaultAuthType" is set "1" (invalid - should be "Basic").

In cgi-bin/admin.c (7092), default_auth_type is rewritten to "1" from
"Basic" after the line below (around line 1395).

      num_settings = cupsAddOption(CUPS_SERVER_REMOTE_ADMIN,
                                   remote_admin, num_settings, &settings);

It looks like misuse of pointer, or something.

Link: http://www.cups.org/str.php?L2692
Version: 1.3.5