delta/curl.git, branch bagder/curl-integer-overflow-1730

test1427: verify command line parser integer overflow detection

2017-08-06T19:33:25+00:00

fixup: str2double bug

2017-08-06T19:32:43+00:00

curl: detect and bail out early on parameter integer overflows

2017-08-06T18:10:40+00:00

Make the number parser aware of the maximum limit curl accepts for a
value and return an error immediately if larger, instead of running an
integer overflow later.

Fixes #1730

getparameter: avoid returning uninitialized 'usedarg'

2017-08-05T09:52:27+00:00

Fixes #1728

gssapi: fix memory leak of output token in multi round context

2017-08-04T22:23:24+00:00

When multiple rounds are needed to establish a security context
(usually ntlm), we overwrite old token with a new one without free.
Found by proposed gss tests using stub a gss implementation (by
valgrind error), though I have confirmed the leak with a real
gssapi implementation as well.

Closes https://github.com/curl/curl/pull/1733

darwinssl: fix compiler warning

2017-08-04T22:11:01+00:00

clang complains:
vtls/darwinssl.c:40:8: error: extra tokens at end of #endif directive
[-Werror,-Wextra-tokens]

This breaks the darwinssl build on Travis. Fix it by making this token
a comment.

Closes https://github.com/curl/curl/pull/1734

CMake: fix CURL_WERROR for MSVC

2017-08-04T10:01:24+00:00

When using CURL_WERROR in MSVC builds, the debug flags were overridden
by the release flags and /WX got added twice in debug mode.

Closes https://github.com/curl/curl/pull/1715

RELEASE-NOTES: synced with 561e9217c

2017-08-04T08:32:38+00:00

test1010: verify that #1718 is fixed

2017-08-04T08:01:23+00:00

... by doing two transfers in nocwd mode and check that there's no
superfluous CWD command.

FTP: skip unnecessary CWD when in nocwd mode

2017-08-04T08:01:23+00:00

... when reusing a connection. If it didn't do any CWD previously.

Fixes #1718