Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | tftp: Alloc maximum blksize, and use default unless OACK is received | Thomas Vegas | 2019-09-09 | 1 | -3/+9 | |
| | | | | | | | | Fixes potential buffer overflow from 'recvfrom()', should the server return an OACK without blksize. Bug: https://curl.haxx.se/docs/CVE-2019-5482.html CVE-2019-5482 | |||||
* | tftp: return error when packet is too small for options | Thomas Vegas | 2019-09-09 | 1 | -20/+33 | |
| | ||||||
* | KNOWN_BUGS/TODO: cleanup and remove outdated issues | Daniel Stenberg | 2019-09-05 | 2 | -258/+32 | |
| | ||||||
* | RELEASE-NOTES: synced | Daniel Stenberg | 2019-09-04 | 1 | -5/+20 | |
| | ||||||
* | netrc: free 'home' on error | Daniel Stenberg | 2019-09-03 | 1 | -7/+12 | |
| | | | | | | | | Follow-up to f9c7ba9096ec2 Coverity CID 1453474 Closes #4291 | |||||
* | urldata: avoid 'generic', use dedicated pointers | Daniel Stenberg | 2019-09-03 | 3 | -22/+25 | |
| | | | | | | For the 'proto' union within the connectdata struct. Closes #4290 | |||||
* | cleanup: move functions out of url.c and make them static | Daniel Stenberg | 2019-09-03 | 5 | -229/+220 | |
| | | | | Closes #4289 | |||||
* | smtp: check for and bail out on too short EHLO response | Daniel Stenberg | 2019-09-03 | 1 | -1/+5 | |
| | | | | | | | | | | | | Otherwise, a three byte response would make the smtp_state_ehlo_resp() function misbehave. Credit to OSS-Fuzz Bug: https://crbug.com/oss-fuzz/16918 Assisted-by: Max Dymond Closes #4287 | |||||
* | smb: init *msg to NULL in smb_send_and_recv() | Daniel Stenberg | 2019-09-02 | 1 | -0/+1 | |
| | | | | | | | | | ... it might otherwise return OK from this function leaving that pointer uninitialized. Bug: https://crbug.com/oss-fuzz/16907 Closes #4286 | |||||
* | ROADMAP: updated after recent user poll | Daniel Stenberg | 2019-09-02 | 1 | -16/+33 | |
| | | | | In rough prio order | |||||
* | THANKS: remove duplicate | Daniel Stenberg | 2019-08-31 | 2 | -1/+1 | |
| | ||||||
* | Curl_addr2string: take an addrlen argument too | Daniel Stenberg | 2019-08-31 | 5 | -16/+24 | |
| | | | | | | | | | | | This allows the function to figure out if a unix domain socket has a file name or not associated with it! When a socket is created with socketpair(), as done in the fuzzer testing, the path struct member is uninitialized and must not be accessed. Bug: https://crbug.com/oss-fuzz/16699 Closes #4283 | |||||
* | CMake: remove needless newlines at end of gss variables | Rolf Eike Beer | 2019-08-31 | 1 | -0/+4 | |
| | ||||||
* | CI: remove duplicate configure flag for LGTM.com | Rolf Eike Beer | 2019-08-31 | 1 | -1/+1 | |
| | ||||||
* | CMake: use platform dependent name for dlopen() library | Rolf Eike Beer | 2019-08-31 | 1 | -1/+1 | |
| | | | | Closes #4279 | |||||
* | quiche: expire when poll returned data | Daniel Stenberg | 2019-08-30 | 1 | -0/+3 | |
| | | | | | | ... to make sure we continue draining the queue until empty Closes #4281 | |||||
* | quiche: decrease available buffer size, don't assign it! | Daniel Stenberg | 2019-08-30 | 1 | -1/+1 | |
| | | | | Found-by: Jeremy Lainé | |||||
* | RELEASE-NOTES: synced | Daniel Stenberg | 2019-08-29 | 1 | -9/+15 | |
| | ||||||
* | curl: fix include conditions | lufia | 2019-08-29 | 2 | -1/+5 | |
| | ||||||
* | plan9: fix installation instructions | lufia | 2019-08-29 | 1 | -4/+4 | |
| | | | | Closes #4276 | |||||
* | ngtcp2: on h3 stream close, call expire | Daniel Stenberg | 2019-08-29 | 1 | -1/+1 | |
| | | | | | | ... to trigger a new read to detect the stream close! Closes #4275 | |||||
* | ngtcp2: build latest ngtcp2 and ngtcp2_crypto_openssl | Tatsuhiro Tsujikawa | 2019-08-29 | 2 | -140/+8 | |
| | | | | Closes #4278 | |||||
* | ngtcp2: set flow control window to stream buffer size | Daniel Stenberg | 2019-08-28 | 1 | -3/+4 | |
| | | | | Closes #4274 | |||||
* | CURLOPT_HEADERFUNCTION.3: clarify | Christopher Head | 2019-08-28 | 1 | -1/+4 | |
| | | | | Closes #4273 | |||||
* | CURLINFO docs: mention that in redirects times are added | Daniel Stenberg | 2019-08-28 | 12 | -12/+37 | |
| | | | | | | Suggested-by: Brandon Dong Fixes #4250 Closes #4269 | |||||
* | travis: enable ngtcp2 builds again | Daniel Stenberg | 2019-08-28 | 1 | -15/+15 | |
| | | | | | | Switched to the openssl-quic-draft-22 openssl branch. Closes #4271 | |||||
* | HTTP3: switched openssl branch to use | Daniel Stenberg | 2019-08-27 | 1 | -1/+1 | |
| | ||||||
* | ngtcp2: Build with latest ngtcp2 and ngtcp2_crypto_openssl | Tatsuhiro Tsujikawa | 2019-08-27 | 6 | -1189/+218 | |
| | | | | Closes #4270 | |||||
* | http2: when marked for closure and wanted to close == OK | Daniel Stenberg | 2019-08-26 | 1 | -0/+5 | |
| | | | | | | | | | It could otherwise return an error even when closed correctly if GOAWAY had been received previously. Reported-by: Tom van der Woerdt Fixes #4267 Closes #4268 | |||||
* | RELEASE-NOTES: synced | Daniel Stenberg | 2019-08-26 | 1 | -6/+26 | |
| | ||||||
* | build-openssl: fix build with Visual Studio 2019 | Daniel Stenberg | 2019-08-26 | 1 | -1/+18 | |
| | | | | | | | Reviewed-by: Marcel Raad Contributed-by: osabc on github Fixes #4188 Closes #4266 | |||||
* | vauth: return CURLE_AUTH_ERROR on gss_init_sec_context() failure | Kamil Dudka | 2019-08-26 | 3 | -3/+3 | |
| | | | | | | This is a follow-up to https://github.com/curl/curl/pull/3864 . Closes #4224 | |||||
* | KNOWN_BUGS: USE_UNIX_SOCKETS on Windows | Daniel Stenberg | 2019-08-26 | 1 | -0/+8 | |
| | | | | Closes #4040 | |||||
* | quiche: send the HTTP body correctly on callback uploads | Daniel Stenberg | 2019-08-26 | 1 | -1/+10 | |
| | | | | Closes #4265 | |||||
* | travis: disable ngtcp2 builds (temporarily) | Daniel Stenberg | 2019-08-26 | 1 | -14/+14 | |
| | | | | | | Just too many API changes right now Closes #4264 | |||||
* | ngtcp2: add support for SSLKEYLOGFILE | Daniel Stenberg | 2019-08-25 | 1 | -0/+18 | |
| | | | | Closes #4260 | |||||
* | ngtcp2: improve h3 response receiving | Daniel Stenberg | 2019-08-25 | 1 | -9/+26 | |
| | | | | Closes #4259 | |||||
* | ngtcp2: use nghttp3_version() | Daniel Stenberg | 2019-08-25 | 1 | -1/+2 | |
| | ||||||
* | ngtcp2: sync with upstream API changes | Daniel Stenberg | 2019-08-25 | 3 | -114/+80 | |
| | | | | Assisted-by: Tatsuhiro Tsujikawa | |||||
* | scp: fix directory name length used in memcpy | Kyle Abramowitz | 2019-08-24 | 1 | -1/+1 | |
| | | | | | | | Fix read off end of array due to bad pointer math in getworkingpath for SCP home directory case. Closes #4258 | |||||
* | http: the 'closed' struct field is used by both ngh2 and ngh3 | Daniel Stenberg | 2019-08-24 | 2 | -7/+1 | |
| | | | | | | | | and remove 'header_recvbuf', not used for anything Reported-by: Jeremy Lainé Closes #4257 | |||||
* | ngtcp2: accept upload via callback | Daniel Stenberg | 2019-08-23 | 5 | -19/+153 | |
| | | | | Closes #4256 | |||||
* | defines: avoid underscore-prefixed defines | Daniel Stenberg | 2019-08-23 | 13 | -332/+332 | |
| | | | | | | | | | | | Double-underscored or underscore plus uppercase letter at least. ... as they're claimed to be reserved. Reported-by: patnyb on github Fixes #4254 Closes #4255 | |||||
* | travis: add a build using ngtcp2 + nghttp3 (and a patched OpenSSL) | Daniel Stenberg | 2019-08-22 | 1 | -0/+36 | |
| | | | | | | Runs no tests Closes #4253 | |||||
* | travis: bump to using nghttp2 version 1.39.2 | Daniel Stenberg | 2019-08-21 | 1 | -5/+5 | |
| | | | | Closes #4252 | |||||
* | docs/examples/curlx: fix errors | Gisle Vanem | 2019-08-21 | 1 | -3/+3 | |
| | | | | | | Initialise 'mimetype' and require the -p12 arg. Closes #4248 | |||||
* | cleanup: remove DOT_CHAR completely | Daniel Stenberg | 2019-08-20 | 3 | -12/+2 | |
| | | | | | | | | | | | | Follow-up to f9c7ba9096ec The use of DOT_CHAR for ".ssh" was probably a mistake and is removed now. Pointed-out-by: Gisle Vanem Bug: https://github.com/curl/curl/pull/4230#issuecomment-522960638 Closes #4247 | |||||
* | spnego_sspi: add typecast to fix build warning | Daniel Stenberg | 2019-08-20 | 1 | -2/+2 | |
| | | | | | | | Reported in build "Win32 target on Debian Stretch (64-bit) - i686-w64-mingw32 - gcc-20170516" Closes #4245 | |||||
* | openssl: build warning free with boringssl | Daniel Stenberg | 2019-08-20 | 2 | -6/+28 | |
| | | | | Closes #4244 | |||||
* | curl: make --libcurl use CURL_HTTP_VERSION_3 | Daniel Stenberg | 2019-08-20 | 1 | -0/+1 | |
| | | | | Closes #4243 |