From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 12 Jan 2026 07:05:49 +0000 (+0100)
Subject: altsvc: only accept 17 byte dates from files
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=31fbbb322efbc0e4a8d31c270b6b82e117fc7345;p=thirdparty%2Fcurl.git

altsvc: only accept 17 byte dates from files

Since the date format is fixed there is no need to accept more data.

Update test355 to verify reject of too long date in alt-svc file

This test case was originally supposed to verify alt-svc loading from a
file but never did because it was done incorrectly.

Now it verifies that a too long date in the input file makes curl
disregard the entry.

Closes #20259
---

diff --git a/lib/altsvc.c b/lib/altsvc.c
index 108f5c0915..cf6f754a04 100644
--- a/lib/altsvc.c
+++ b/lib/altsvc.c
@@ -39,7 +39,7 @@
 #include "connect.h"
 
 #define MAX_ALTSVC_LINE    4095
-#define MAX_ALTSVC_DATELEN 256
+#define MAX_ALTSVC_DATELEN 17
 #define MAX_ALTSVC_HOSTLEN 2048
 #define MAX_ALTSVC_ALPNLEN 10
 
diff --git a/tests/data/test355 b/tests/data/test355
index 8cb29d3792..5c74321ac2 100644
--- a/tests/data/test355
+++ b/tests/data/test355
@@ -25,18 +25,22 @@ Funny-head: yesyes
 <client>
 <features>
 alt-svc
+Debug
 </features>
+<setenv>
+CURL_ALTSVC_HTTP=1
+</setenv>
 <server>
 http
 </server>
 <name>
-load Alt-Svc from file and use
+Alt-Svc from file with too long date
 </name>
 <command>
-http://%HOSTIP:%HTTPPORT/%TESTNUMBER --alt-svc ""
+http://%HOSTIP:%HTTPPORT/%TESTNUMBER --alt-svc "%LOGDIR/altsvc-%TESTNUMBER"
 </command>
 <file name="%LOGDIR/altsvc-%TESTNUMBER">
-h1 example.com 80 h1 %HOSTIP %HTTPPORT "20290222 22:19:28" 0 0
+h1 %HOSTIP %HTTPPORT h1 example.com 80 "20290222 22:19:028" 0 0
 </file>
 </client>