Daniel Stenberg wrote:

> On Mon, 23 Aug 2004, Harshal Pradhan wrote:
>
>> 2 Date: Mon, 23 Aug 2004 13:33:00 GMT
>
>
> So if you feed this date string to curl_getdate(), it triggers the flaw?
>

Yes, I believe so. (Though I haven't tried writing a standalone test.)

But, if you want a date that I can completely vouch for, here is another
instance while parsing Last-Modified that I just confirmed I can
reproduce reliably.

This is the stack trace annotated with the relevant date string variable
values.

---------------------------------------------------------------------
Curl_gd_parse() Line 561
curl_getdate() Line 983
    p 0x0160e25e " Mon, 19 Aug 2002 06:48:32 GMT"

Curl_readwrite(connectdata * conn=0x0403f278,
                unsigned char * done=0x03fce93f) Line 838
    k->p 0x0160e250 "Last-Modified: Mon, 19 Aug 2002 06:48:32 GMT"

curl_multi_perform(void * multi_handle=0x016180b0,
                    int * running_handles=0x03fcfe0c) Line 485

---------------------------------------------------------------------

If you need any further information let me know.

Harshal
Received on 2004-08-24