diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2020-08-22 23:50:14 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2020-08-23 00:09:39 +0200 |
| commit | 712d16cbe05ee5890c05d93773f08bbe134b3f1d (patch) | |
| tree | 97bd1de4e4bc55dff37aa4509e9c818164aa8e2d | |
| parent | 38039da764f9302f3188432895184eeae9ca8eaa (diff) | |
| download | curl-712d16cbe05ee5890c05d93773f08bbe134b3f1d.tar.gz | |
KNOWN_BUGS: 'no_proxy' string-matches IPv6 numerical addreses
Also: the current behavior is now documented in the curl.1 and
CURLOPT_NOPROXY.3 man pages.
Reported-by: Andrew Barnes
Closes #5745
Closes #5841
| -rw-r--r-- | docs/KNOWN_BUGS | 8 | ||||
| -rw-r--r-- | docs/cmdline-opts/page-footer | 4 | ||||
| -rw-r--r-- | docs/libcurl/opts/CURLOPT_NOPROXY.3 | 6 |
3 files changed, 17 insertions, 1 deletions
diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS index e35172daf..bc77913b6 100644 --- a/docs/KNOWN_BUGS +++ b/docs/KNOWN_BUGS @@ -104,6 +104,7 @@ problems may have been fixed or changed somewhat since this was written! 11.9 DoH doesn't inherit all transfer options 11.10 Blocking socket operations in non-blocking API 11.11 A shared connection cache is not thread-safe + 11.12 'no_proxy' string-matches IPv6 numerical addreses 12. LDAP and OpenLDAP 12.1 OpenLDAP hangs after returning results @@ -762,6 +763,13 @@ problems may have been fixed or changed somewhat since this was written! See https://github.com/curl/curl/issues/4915 +11.12 'no_proxy' string-matches IPv6 numerical addreses + + This has the downside that "::1" for example doesn't match "::0:1" even + though they are in fact the same address. + + See https://github.com/curl/curl/issues/5745 + 12. LDAP and OpenLDAP 12.1 OpenLDAP hangs after returning results diff --git a/docs/cmdline-opts/page-footer b/docs/cmdline-opts/page-footer index 2a65b84f3..f151f2b58 100644 --- a/docs/cmdline-opts/page-footer +++ b/docs/cmdline-opts/page-footer @@ -36,6 +36,10 @@ accesses the target URL through the proxy. The list of host names can also be include numerical IP addresses, and IPv6 versions should then be given without enclosing brackets. + +IPv6 numerical addresses are compared as strings, so they will only match if +the representations are the same: "::1" is the same as "::0:1" but they don't +match. .IP "CURL_SSL_BACKEND <TLS backend>" If curl was built with support for "MultiSSL", meaning that it has built-in support for more than one TLS backend, this environment variable can be set to diff --git a/docs/libcurl/opts/CURLOPT_NOPROXY.3 b/docs/libcurl/opts/CURLOPT_NOPROXY.3 index 495fad6fd..5aa6feede 100644 --- a/docs/libcurl/opts/CURLOPT_NOPROXY.3 +++ b/docs/libcurl/opts/CURLOPT_NOPROXY.3 @@ -5,7 +5,7 @@ .\" * | (__| |_| | _ <| |___ .\" * \___|\___/|_| \_\_____| .\" * -.\" * Copyright (C) 1998 - 2018, Daniel Stenberg, <daniel@haxx.se>, et al. +.\" * Copyright (C) 1998 - 2020, Daniel Stenberg, <daniel@haxx.se>, et al. .\" * .\" * This software is licensed as described in the file COPYING, which .\" * you should have received as part of this distribution. The terms @@ -49,6 +49,10 @@ brackets: "example.com,::1,localhost" +IPv6 numerical addresses are compared as strings, so they will only match if +the representations are the same: "::1" is the same as "::0:1" but they don't +match. + The application does not have to keep the string around after setting this option. .SH "Environment variables" |