delta/curl.git/lib/escape.c, branch bagder/test493-https

curl_easy_escape: limit output string length to 3 * max input

2020-11-09T22:01:06+00:00

... instead of the limiting it to just the max input size. As every
input byte can be expanded to 3 output bytes, this could limit the input
string to 2.66 MB instead of the intended 8 MB.

Reported-by: Marc Schlatter
Closes #6192

curl.se: new home

2020-11-04T22:59:47+00:00

Closes #6172

escape: make the URL decode able to reject only %00 bytes

2020-06-25T07:57:18+00:00

... or all "control codes" or nothing.

Assisted-by: Nicolas Sterchele

escape: zero length input should return a zero length output

2020-06-24T22:00:28+00:00

Regression added in 7.71.0.

Fixes #5601
Reported-by: Kristoffer Gleditsch
Closes #5602

url: accept "any length" credentials for proxy auth

2020-05-25T21:08:57+00:00

They're only limited to the maximum string input restrictions, not to
256 bytes.

Added test 1178 to verify

Reported-by: Will Roberts
Fixes #5448
Closes #5449

dynbuf: introduce internal generic dynamic buffer functions

2020-05-04T08:40:39+00:00

A common set of functions instead of many separate implementations for
creating buffers that can grow when appending data to them. Existing
functionality has been ported over.

In my early basic testing, the total number of allocations seem at
roughly the same amount as before, possibly a few less.

See docs/DYNBUF.md for a description of the API.

Closes #5300

snprintf: renamed and we now only use msnprintf()

2018-11-23T07:26:51+00:00

The function does not return the same value as snprintf() normally does,
so readers may be mislead into thinking the code works differently than
it actually does. A different function name makes this easier to detect.

Reported-by: Tomas Hoger
Assisted-by: Daniel Gustafsson
Fixes #3296
Closes #3297

URL-API

2018-09-08T13:36:11+00:00

See header file and man pages for API. All documented API details work
and are tested in the 1560 test case.

Closes #2842

cppcheck: fix warnings

2018-06-11T09:14:48+00:00

- Get rid of variable that was generating false positive warning
(unitialized)

- Fix issues in tests

- Reduce scope of several variables all over

etc

Closes #2631

escape.c: error: pointer targets differ in signedness

2017-09-15T14:56:23+00:00