Menu

#629 curl accepts illegal symbols in the date input by "-z"

closed-later
http (206)
3
2014-10-10
2007-03-07
songma
No

In curl-7.16.0,7.16.1 and latest snapshot source code, when user executes a command as the following:

$ curl -v www.google.com -z "dec 12 11:00:00 $$%% GMT"

It will "correctly" display the following:

* About to connect() to www.google.com port 80 (#0)
* Trying 64.233.189.104... connected
* Connected to www.google.com (64.233.189.104) port 80 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.16.2-20070307 (i686-pc-linux-gnu) libcurl/7.16.0 OpenSSL/0.9.7d zlib/1.2.3 libidn/0.6.0
> Host: www.google.com
> Accept: */*
> If-Modified-Since: Tue, 19 Jan 2038 03:14:07 GMT
>

I think curl should check the input date format and not accept the illegal/meaningless symbol like "$$%%". The input is invalid and curl gives a valid "If-Modified-Since" value. Is it a bug or a design as-is?

This problem can be reproduced on multiple Linux and Unix platforms. I think it is a generic problem.

Please feel free to let me know your ideas.

Thanks
Song Ma

Discussion

  • Daniel Stenberg

    Daniel Stenberg - 2007-03-08
    • priority: 5 --> 3
    • status: open --> open-later
     
  • Daniel Stenberg

    Daniel Stenberg - 2007-03-08

    Logged In: YES
    user_id=1110
    Originator: NO

    While possibly a problem, I consider it very minor and I'm personally not planning on working on fixing this anytime soon. Are you?

     
  • Daniel Stenberg

    Daniel Stenberg - 2007-03-14
    • status: open-later --> closed-later
     
MongoDB Logo MongoDB