wget ftp-ls: stack buffer overflow in VMS listing date parsing

In wget's src/ftp-ls.c, the VMS directory listing parser builds a stack buffer date_str[32] using strcpy and strcat on tokens derived from remote server output. The code checks strlen(tok) < 12 and then does not account for the appended space and NUL terminator, so borderline lengths can overflow the 32-byte stack buffer (or future refactors that relax conditions can).