From 22d364729bf492ac79d6547c108fa365b19576f7 Mon Sep 17 00:00:00 2001
From: Guillaume Ayoub <guillaume.ayoub@kozea.fr>
Date: Tue, 23 May 2017 17:11:28 +0200
Subject: [PATCH] Use "&" instead of "+" to test booleans

---
 radicale/auth.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/radicale/auth.py b/radicale/auth.py
index 210225b7..32849a73 100644
--- a/radicale/auth.py
+++ b/radicale/auth.py
@@ -198,6 +198,6 @@ class Auth(BaseAuth):
                     # attacks, see #591.
                     login_ok = hmac.compare_digest(login, user)
                     password_ok = self.verify(hash_value, password)
-                    if login_ok + password_ok == 2:
+                    if login_ok & password_ok:
                         return True
         return False