summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* curl_easy_escape: limit output string length to 3 * max inputDaniel Stenberg2020-11-091-1/+1
| | | | | | | | | ... instead of the limiting it to just the max input size. As every input byte can be expanded to 3 output bytes, this could limit the input string to 2.66 MB instead of the intended 8 MB. Reported-by: Marc Schlatter Closes #6192
* docs: document the 8MB input string limitDaniel Stenberg2020-11-092-2/+4
| | | | | | | | | | | for curl_easy_escape and curl_easy_setopt() The limit is there to catch mistakes and abuse. It is meant to be large enough to allow virtually all "fine" use cases. Reported-by: Marc Schlatter Fixes #6190 Closes #6191
* mqttd: fclose test file when doneDaniel Stenberg2020-11-091-2/+5
| | | | | | | Reported-by: Marc Hörsken Reviewed-by: Jay Satiro Bug: #6058 Closes #6189
* RELEASE-NOTES: syncedDaniel Stenberg2020-11-091-8/+32
|
* THANKS-filter: ignore autobuild linksDaniel Stenberg2020-11-091-0/+1
|
* Revert "libcurl.pc: make it relocatable"Daniel Stenberg2020-11-097-363/+5
| | | | | | | | | | This reverts commit 3862c37b6373a55ca704171d45ba5ee91dec2c9f. That fix should either be done differently or with an option. Reported-by: asavah on github Fixes #6157 Closes #6183
* examples/httpput: remove use of CURLOPT_PUTDaniel Stenberg2020-11-091-4/+1
| | | | | | | | It is deprecated and unnecessary since it already sets CURLOPT_UPLOAD. Reported-by: Jeroen Ooms Fixes #6186 Closes #6187
* Curl_pgrsStartNow: init speed limit time stamps at startDaniel Stenberg2020-11-091-4/+2
| | | | | | | | | | By setting the speed limit time stamps unconditionally at transfer start, we can start off a transfer without speed limits and yet allow them to get set during transfer and have an effect. Reported-by: Kael1117 on github Fixes #6162 Closes #6184
* ngtcp2: adapt to recent nghttp3 updatesDaniel Stenberg2020-11-091-0/+1
| | | | | | 'reset_stream' was added to the nghttp3_conn_callbacks struct Closes #6185
* configure: pass -pthread to Libs.private for pkg-configDaniel Stenberg2020-11-071-1/+3
| | | | | | Reported-by: Cristian Morales Vega Fixes #6168 Closes #6181
* altsvc: minimize variable scope and avoid "DEAD_STORE"Daniel Stenberg2020-11-071-2/+1
| | | | Closes #6182
* FAQ: remove "Why is there a HTTP/1.1 in my HTTP/2 request?"Daniel Stenberg2020-11-061-12/+0
| | | | This hasn't been the case for a while now, remove.
* FAQ: refresh "Why do I get "certificate verify failed"Daniel Stenberg2020-11-061-21/+26
| | | | Add more details, remove references to ancient curl version.
* test493: verify --hsts upgrade and that %{url_effective} reflects thatDaniel Stenberg2020-11-062-1/+62
| | | | Closes #6175
* url: make sure an HSTS upgrade updates URL and scheme correctlyDaniel Stenberg2020-11-061-2/+20
| | | | Closes #6175
* tool_operate: set HSTS with CURLOPT_HSTS to pass on filenameDaniel Stenberg2020-11-061-1/+1
| | | | Closes #6175
* hsts: remove debug code leftoversDaniel Stenberg2020-11-061-2/+0
| | | | Closes #6175
* FAQ: refreshedDaniel Stenberg2020-11-051-95/+48
| | | | | | | | | - remove a few ancient questions - add configure with static libs question - updated wording in several places - lowercased curl Closes #6177
* examples: fix comment syntaxDaniel Gustafsson2020-11-051-1/+1
| | | | | | | Commit ac0a88fd2 accidentally added a stray character outside of the comment which broke compilation. Fix by removing. Reported-by: autobuild https://curl.se/dev/log.cgi?id=20201105084306-12742
* hsts: Remove pointless call to free in errorpathDaniel Gustafsson2020-11-051-1/+0
| | | | | | | | The line variable will always be NULL in the error path, so remove the free call since it's pointless. Closes #6170 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* docs: Fix various typos in documentationDaniel Gustafsson2020-11-055-6/+6
| | | | | Closes #6171 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* copyright: fix year rangesDaniel Stenberg2020-11-05394-395/+398
| | | | Follow-up from 4d2f8006777
* HISTORY: the new domainDaniel Stenberg2020-11-041-2/+5
|
* curl.se: new homeDaniel Stenberg2020-11-041453-1669/+1669
| | | | Closes #6172
* KNOWN_BUGS: FTPS with Schannel times out file list operationDaniel Stenberg2020-11-041-0/+7
| | | | | Reported-by: bobmitchell1956 on github Closes #5284
* KNOWN_BUGS: SMB tests fail with Python 2Daniel Stenberg2020-11-041-0/+7
| | | | | Reported-by: Jay Satiro Closes #5983
* KNOWN_BUGS: LDAPS with NSS is slowDaniel Stenberg2020-11-041-0/+5
| | | | | Reported-by: nosajsnikta on github Closes #5874
* travis: use ninja-build for CMake buildsSergei Nikulov2020-11-042-16/+13
| | | | | | | Added package ninja-build to environment Use ninja to speed up CMake builds Closes #6077
* rtsp: error out on empty Session ID, unified the codeHarry Sintonen2020-11-041-18/+18
|
* rtsp: fixed the RTST Session ID mismatch in test 570Harry Sintonen2020-11-041-1/+5
| | | | Closes #6161
* rtsp: fixed Session ID comparison to refuse prefixHarry Sintonen2020-11-041-2/+11
| | | | Closes #6161
* RELEASE-NOTES: syncedDaniel Stenberg2020-11-031-5/+5
| | | | (forgot to update the list of contributors)
* RELEASE-NOTES: syncedDaniel Stenberg2020-11-031-4/+24
|
* curlver: bumped to 7.74.0Daniel Stenberg2020-11-032-5/+5
|
* hsts: add read/write callbacksDaniel Stenberg2020-11-0327-22/+652
| | | | | | | | - read/write callback options - man pages for the 4 new setopts - test 1915 verifies the callbacks Closes #5896
* hsts: add support for Strict-Transport-SecurityDaniel Stenberg2020-11-0338-21/+1122
| | | | | | | | | | | | | | | | | | | | | | | | | - enable in the build (configure) - header parsing - host name lookup - unit tests for the above - CI build - CURL_VERSION_HSTS bit - curl_version_info support - curl -V output - curl-config --features - CURLOPT_HSTS_CTRL - man page for CURLOPT_HSTS_CTRL - curl --hsts (sets CURLOPT_HSTS_CTRL and works with --libcurl) - man page for --hsts - save cache to disk - load cache from disk - CURLOPT_HSTS - man page for CURLOPT_HSTS - added docs/HSTS.md - fixed --version docs - adjusted curl_easy_duphandle Closes #5896
* CI/tests: enable test target on TravisCI for CMake buildsSergei Nikulov2020-11-031-0/+1
| | | | | | | | Added test-nonflaky target to CMake builds Disabled test 1139 because the cmake build doesn't create docs/curl.1 Closes #6074
* tool_debug_cb: do not assume zero-terminated dataDaniel Stenberg2020-11-031-1/+1
| | | | Follow-up to d70a5b5a0f5e3
* sendf: move the verbose-check into Curl_debugDaniel Stenberg2020-11-0211-138/+103
| | | | | | Saves us from having the same check done everywhere. Closes #6159
* travis: use valgrind when running tests for debug buildsDaniel Stenberg2020-11-022-5/+5
| | | | | | Except the non-x86 and sanitizer builds Closes #6154
* header.d: fix syntax mistakeDaniel Stenberg2020-11-021-1/+1
| | | | follow-up from 1144886f38fd0
* gnutls: fix memory leaks (certfields memory wasn't released)Harry Sintonen2020-11-021-1/+6
| | | | Closes #6153
* tests: add missing global_init/cleanup callsDaniel Stenberg2020-11-023-2/+9
| | | | | | | Without the cleanup call in these test files, the mbedTLS backend leaks memory. Closes #6156
* tool_operate: --retry for HTTP 408 responses tooDaniel Stenberg2020-11-021-0/+1
| | | | | | | | | | This was inadvertently dropped from the code when the parallel support was added. Regression since b88940850 (7.66.0) Reviewed-by: Jay Satiro Closes #6155
* http: pass correct header size to debug callback for chunked postDaniel Stenberg2020-10-311-5/+9
| | | | | | | | | | | ... when the chunked framing was added, the size of the "body part" of the data was calculated wrongly so the debug callback would get told a header chunk a few bytes too big that would also contain the first few bytes of the request body. Reported-by: Dirk Wetter Ref: #6144 Closes #6147
* header.d: mention the "Transfer-Encoding: chunked" handlingDaniel Stenberg2020-10-311-8/+10
| | | | | Ref: #6144 Closes #6148
* acinclude: detect manually set minimum macos/ipod versionDaniel Stenberg2020-10-301-3/+9
| | | | | | | | | ... even if set in the CC or IPHONEOS/MACOSX_DEPLOYMENT_TARGET variables. Reported-by: hamstergene on github Fixes #6138 Closes #6140
* tests: fix some http/2 tests for older versions of nghttpxJay Satiro2020-10-295-11/+5
| | | | | | | | | | | | | - Add regex that strips http/2 server header name to those http/2 tests that don't already have it. - Improve that regex in all http/2 tests. Tests 358 and 359 were failing for me before this change on a system that uses an older version of nghttpx which includes its version number in the server header. Closes https://github.com/curl/curl/pull/6139
* RELEASE-NOTES: syncedDaniel Stenberg2020-10-301-6/+24
|
* configure: use pkgconfig to find openSSL when cross-compilingCristian Morales Vega2020-10-291-8/+2
| | | | | | | This reverts 736a40fec (November 2004), which doesn't explain why it was done. Closes #6145
View Lorry Controller Status