Bugs item #1675495, was opened at 2007-03-07 06:59
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1675495&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: http
Group: wrong behaviour
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: songma (songmash)
Assigned to: Daniel Stenberg (bagder)
Summary: curl accepts illegal symbols in the date input by "-z"

Initial Comment:
In curl-7.16.0,7.16.1 and latest snapshot source code, when user executes a command as the following:

$ curl -v www.google.com -z "dec 12 11:00:00 $$%% GMT"

It will "correctly" display the following:

* About to connect() to www.google.com port 80 (#0)
* Trying 64.233.189.104... connected
* Connected to www.google.com (64.233.189.104) port 80 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.16.2-20070307 (i686-pc-linux-gnu) libcurl/7.16.0 OpenSSL/0.9.7d zlib/1.2.3 libidn/0.6.0
> Host: www.google.com
> Accept: */*
> If-Modified-Since: Tue, 19 Jan 2038 03:14:07 GMT
>

I think curl should check the input date format and not accept the illegal/meaningless symbol like "$$%%". The input is invalid and curl gives a valid "If-Modified-Since" value. Is it a bug or a design as-is?

This problem can be reproduced on multiple Linux and Unix platforms. I think it is a generic problem.

Please feel free to let me know your ideas.

Thanks
Song Ma

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1675495&group_id=976
Received on 2007-03-08