Hmm, I concur. This is trivially reproducible with the curl command line:

$ curl --version
curl 7.10-pre4 (i686-pc-linux-gnu) libcurl/7.10-pre4 OpenSSL/0.9.6c zlib/1.1.3
$ curl -i https://analyzer.securityfocus.com|od -c|more
0000000 H T T P / 1 . 1 2 0 0 O K \r
0000020 \n S e r v e r : M i c r o s o
0000040 f t - I I S / 5 . 0 \r \n D a t e
0000060 : W e d , 0 9 O c t 2 0
0000100 0 2 0 1 : 1 5 : 2 1 G M T \r
0000120 \n C o n t e n t - L e n g t h :
0000140 2 5 1 2 1 \r \n C o n t e n t -
0000160 T y p e : t e x t \0 \0 \0 \0 \0 \0
0000200 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
*
0000340 \0 \0 / h t m l \r \n S e t - C o o
0000360 k i e : A S P S E S S I O N I
0000400 D G Q Q G G P C O = B P E G O F
0000420 G A H N J N O B M F I K P P C O
0000440 M P ; p a t h = / \r \n C a c h
0000460 e - c o n t r o l : p r i v a
0000500 t e \r \n \r \n

but doesn't occur with:
$ curl --version
curl 7.9.4 (i586-mandrake-linux-gnu) libcurl 7.9.7 (OpenSSL 0.9.6c)

(using the same openssl library).

I can't reproduce this with any of 3 or 4 other ssl sites I tried. SSLv2,
http/1.0 and tlsv1 didn't make any difference to the output, however, using
-I (HEAD) works normally.

Cris

On Wed, 9 Oct 2002 04:54, Craig Davison wrote:
> On Tue, Oct 08, 2002 at 11:38:16AM -0600, Craig Davison wrote:
> > I've attached a program that reproduces this.
>
> [snip]
>
> > int main (int argc, char **argv)
> > {
> > if (argc < 2)
> > return 0;
> > printf ("cURL version: %s\n\n", curl_version ());
> > TestGet (argv[1]);
> > return 0;
> > }
>
> I just realized I forgot the curl_global_init (CURL_GLOBAL_ALL) /
> curl_global_cleanup (). The problem is still reproducible with these calls
> added.

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
Received on 2002-10-09