git-market/curl-curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-11 12:01:42 +08:00
Code Issues Actions 14 Packages Projects Releases Wiki Activity

altsvc: only accept 17 byte dates from files

Browse Source 
Since the date format is fixed there is no need to accept more data.

Update test355 to verify reject of too long date in alt-svc file

This test case was originally supposed to verify alt-svc loading from a
file but never did because it was done incorrectly.

Now it verifies that a too long date in the input file makes curl
disregard the entry.

Closes #20259
This commit is contained in:
Daniel Stenberg 2026-01-12 08:05:49 +01:00
parent 40fee505a0
commit 31fbbb322e
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
2 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/altsvc.c
View File

@ -39,7 +39,7 @@
#include "connect.h"
#define MAX_ALTSVC_LINE 4095
#define MAX_ALTSVC_DATELEN 256
#define MAX_ALTSVC_DATELEN 17
#define MAX_ALTSVC_HOSTLEN 2048
#define MAX_ALTSVC_ALPNLEN 10

10
tests/data/test355
View File

@ -25,18 +25,22 @@ Funny-head: yesyes
<client>
<features>
alt-svc
Debug
</features>
<setenv>
CURL_ALTSVC_HTTP=1
</setenv>
<server>
http
</server>
<name>
load Alt-Svc from file and use
Alt-Svc from file with too long date
</name>
<command>
http://%HOSTIP:%HTTPPORT/%TESTNUMBER --alt-svc ""
http://%HOSTIP:%HTTPPORT/%TESTNUMBER --alt-svc "%LOGDIR/altsvc-%TESTNUMBER"
</command>
<file name="%LOGDIR/altsvc-%TESTNUMBER">
h1 example.com 80 h1 %HOSTIP %HTTPPORT "20290222 22:19:28" 0 0
h1 %HOSTIP %HTTPPORT h1 example.com 80 "20290222 22:19:028" 0 0
</file>
</client>