summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* test130: verify comments in .netrcbagder/netrc-commentsDaniel Stenberg2017-08-021-0/+1
|
* netrc: skip lines starting with '#'Gisle Vanem2017-08-021-1/+4
| | | | Bug: https://curl.haxx.se/mail/lib-2017-08/0008.html
* travis: build osx with libressl tooDaniel Stenberg2017-08-021-0/+3
|
* travis: build osx with openssl tooDaniel Stenberg2017-08-021-1/+4
|
* tests/server/util: fix curltime mistake from 4dee50b9c80f9Daniel Stenberg2017-08-021-1/+1
|
* curl_threads: fix MSVC compiler warningMarcel Raad2017-08-011-1/+1
| | | | | | | | | | | Use LongToHandle to convert from long to HANDLE in the Win32 implementation. This should fix the following warning when compiling with MSVC 11 (2012) in 64-bit mode: lib\curl_threads.c(113): warning C4306: 'type cast' : conversion from 'long' to 'HANDLE' of greater size Closes https://github.com/curl/curl/pull/1717
* BUGS: improved phrasing about security bugsDaniel Stenberg2017-08-011-3/+3
| | | | Reported-by: Max Dymond
* BUGS: clarify how to report security related bugsDaniel Stenberg2017-08-011-15/+32
|
* multi: fix request timer managementBrad Spencer2017-08-011-14/+13
| | | | | | | | | | | | | There are some bugs in how timers are managed for a single easy handle that causes the wrong "next timeout" value to be reported to the application when a new minimum needs to be recomputed and that new minimum should be an existing timer that isn't currently set for the easy handle. When the application drives a set of easy handles via the `curl_multi_socket_action()` API (for example), it gets told to wait the wrong amount of time before the next call, which causes requests to linger for a long time (or, it is my guess, possibly forever). Bug: https://curl.haxx.se/mail/lib-2017-07/0033.html
* curl_setup: Define CURL_NO_OLDIES for building libcurlJay Satiro2017-08-011-0/+4
| | | | | | .. to catch accidental use of deprecated error codes. Ref: https://github.com/curl/curl/issues/1688#issuecomment-316764237
* configure: fix the check for IdnToUnicodeJeremy Tan2017-08-011-1/+6
| | | | | Fixes #1669 Closes #1713
* http: fix response code parser to avoid integer overflowDaniel Stenberg2017-07-313-21/+16
| | | | | | | | test 1429 and 1433 were updated to work with the stricter HTTP status line parser. Closes #1714 Reported-by: Brian Carpenter
* libcurl: Stop using error codes defined under CURL_NO_OLDIESDwarakanath Yadavalli2017-07-312-2/+2
| | | | | Fixes https://github.com/curl/curl/issues/1688 Closes https://github.com/curl/curl/pull/1712
* include.d: clarify --include is only for response headersJay Satiro2017-07-301-1/+1
| | | | | | | Follow-up to 171f8de and de6de94. Bug: https://github.com/curl/curl/commit/de6de94#commitcomment-23370851 Reported-by: Daniel Stenberg
* cmake: support make uninstalljasjuang2017-07-302-0/+37
| | | | Closes #1674
* RELEASE-NOTES: synced with 001701c47Daniel Stenberg2017-07-301-3/+37
|
* AppVeyor: now really use CURL_WERRORMarcel Raad2017-07-291-1/+1
| | | | | | | It was misspelled as CURL_ERROR in commit 2d86e8d1286e0fbe3d811e2e87fa0b5e53722db4. Closes https://github.com/curl/curl/pull/1686
* tool_help: clarify --include is only for response headersJay Satiro2017-07-291-1/+1
| | | | | | Follow-up to 171f8de. Ref: https://github.com/curl/curl/issues/1704
* splay: fix signed/unsigned mismatch warningJay Satiro2017-07-291-2/+2
| | | | | | Follow-up to 4dee50b. Ref: https://github.com/curl/curl/pull/1693
* include.d: clarify that it concerns the response headersDaniel Stenberg2017-07-281-2/+5
| | | | | Reported-by: olesteban at github Fixes #1704
* curl_rtmp: fix a compiler warningJohannes Schindelin2017-07-281-1/+1
| | | | | | | | | The headers of librtmp declare the socket as `int`, and on Windows, that disagrees with curl_socket_t. Bug: #1652 Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
* test1323: verify curlx_tvdiffDaniel Stenberg2017-07-284-2/+104
|
* timeval: struct curltime is a struct timeval replacementDaniel Stenberg2017-07-2829-128/+152
| | | | | | | | | ... to make all libcurl internals able to use the same data types for the struct members. The timeval struct differs subtly on several platforms so it makes it cumbersome to use everywhere. Ref: #1652 Closes #1693
* darwinssl: fix variable type mistake (regression)Daniel Stenberg2017-07-271-1/+2
| | | | | | | | ... which made --tlsv1.2 not work because it would blank the max tls version variable. Reported-by: Nick Miyake Bug: #1703
* multi: mention integer overflow risk if using > 500 million socketsDaniel Stenberg2017-07-271-0/+4
| | | | | | | Reported-by: ovidiu-benea@users.noreply.github.com Closes #1675 Closes #1683
* checksrc: escape open brace in regexDaniel Stenberg2017-07-271-2/+2
| | | | ... to silence warning.
* nss: fix a possible use-after-free in SelectClientCert()Kamil Dudka2017-07-201-0/+8
| | | | | | | | | | ... causing a SIGSEGV in showit() in case the handle used to initiate the connection has already been freed. This commit fixes a bug introduced in curl-7_19_5-204-g5f0cae803. Reported-by: Rob Sanders Bug: https://bugzilla.redhat.com/1436158
* nss: unify the coding style of nss_send() and nss_recv()Kamil Dudka2017-07-201-6/+11
| | | | No changes in behavior intended by this commit.
* tests/server/resolve.c: fix deprecation warningMarcel Raad2017-07-181-26/+28
| | | | | | | | MSVC warns that gethostbyname is deprecated. Always use getaddrinfo instead to fix this when IPv6 is enabled, also for IPv4 resolves. This is also consistent with what libcurl does. Closes https://github.com/curl/curl/pull/1682
* darwinssl: fix pinnedpubkey build errorJay Satiro2017-07-171-1/+1
| | | | | | | - s/SessionHandle/Curl_easy/ Bug: https://github.com/curl/curl/commit/eb16305#commitcomment-23035670 Reported-by: Gisle Vanem
* rtspd: fix GCC warning after MSVC warning fixMarcel Raad2017-07-161-1/+3
| | | | | | | | Older GCC warns: /tests/server/rtspd.c:1194:10: warning: missing braces around initializer [-Wmissing-braces] Fix this by using memset instead of an initializer.
* libtest: fix MSVC warning C4706Marcel Raad2017-07-163-9/+12
| | | | | | With warning level 4, MSVC warns about assignments within conditional expressions. Change the while loop to a do-while loop to fix this. This change is also consistent with CODE_STYLE.md.
* sockfilt: suppress conversion warning with explicit castMarcel Raad2017-07-161-1/+1
| | | | MSVC warns when implicitly casting -1 to unsigned long.
* rtspd: fix MSVC level 4 warningMarcel Raad2017-07-161-1/+1
| | | | warning C4701: potentially uninitialized local variable 'req' used
* winbuild: re-enable warning C4127 for curl toolMarcel Raad2017-07-141-1/+1
| | | | | Disabled in cda19a345f6970e22fe8b7a808aeb8f086a21eac. It only needs to be disabled for libcurl.
* winbuild: build with warning level 4Marcel Raad2017-07-131-4/+4
| | | | | | | | | | This is consistent with 7bc64561a2e63ca93e4b0b31d350773ba80955c2, which changed the warning level from 3 to 4 for the Visual Studio project files. But disable the level 4 warning C4127 "conditional expression is constant", as that one is issued by older versions of the Windows SDK as well as curl itself under some circumstances. Closes https://github.com/curl/curl/pull/1667
* travis: install libidn2Max Dymond2017-07-121-0/+1
| | | | | | Install libidn2 to increase test coverage (IDN tests) Closes https://github.com/curl/curl/pull/1673
* travis: enable warnings also in release modeMarcel Raad2017-07-121-1/+1
| | | | | | ... to get warnings also on Linux/GCC and OSX/clang. Closes https://github.com/curl/curl/pull/1666
* travis: install libssh2Max Dymond2017-07-121-0/+1
| | | | Install libssh2 to increase test coverage (SFTP, SCP)
* system.h: include winsock2.h before windows.hMarcel Raad2017-07-121-1/+1
| | | | | ... to avoid compiler warnings if the user doesn't want WIN32_LEAN_AND_MEAN.
* build: remove WIN32_LEAN_AND_MEAN from individual build systemsMarcel Raad2017-07-112-5/+0
| | | | | | | | It's defined for all build systems in curl_setup.h since commit beb08481d01a07a8b10938b1078a5e298b1c2912. This caused macro redefinition warnings in the configure builds. Closes https://github.com/curl/curl/pull/1677
* ISSUE_TEMPLATE: Add a comment not to file security issues on githubJay Satiro2017-07-111-2/+2
|
* curl_setup: always define WIN32_LEAN_AND_MEAN on WindowsMarcel Raad2017-07-113-7/+12
| | | | | | | | | Make sure to always define WIN32_LEAN_AND_MEAN before including any Windows headers to avoid pulling in unnecessary headers. This avoids unnecessary macro clashes and compiler warnings. Ref: https://github.com/curl/curl/issues/1562 Closes https://github.com/curl/curl/pull/1672
* strerror: Preserve Windows error code in some functionsJay Satiro2017-07-116-48/+51
| | | | | | | | | | | This is a follow-up to af02162 which removed (SET_)ERRNO macros. That commit was an earlier draft that I committed by mistake, which was then remedied by a5834e5 and e909de6, and now this commit. With this commit there is now no difference between the current code and the changes that were approved in the final draft. Thanks-to: Max Dymond, Marcel Raad, Daniel Stenberg, Gisle Vanem Ref: https://github.com/curl/curl/pull/1589
* tests: Fix up issues with errno in test filesMax Dymond2017-07-107-25/+25
| | | | Closes https://github.com/curl/curl/pull/1671
* errno: fix non-windows builds after af0216251b94e7Daniel Stenberg2017-07-102-6/+8
|
* make: fix docs build on OpenBSDRyan Winograd2017-07-101-0/+3
| | | | Ref: #1591
* ldap: fix MinGW compiler warningMarcel Raad2017-07-101-2/+1
| | | | | | | | | | ldap_bind_s is marked as deprecated in w32api's winldap.h shipping with the latest original MinGW, resulting in compiler warnings since commit f0fe66f13c93d3d0af45d9fb1231c9164e0f9dc8. Fix this for the non-SSPI case by using ldap_simple_bind_s again instead of ldap_bind_s with LDAP_AUTH_SIMPLE. Closes https://github.com/curl/curl/pull/1664
* curl-compilers.m4: disable warning spam with Cygwin's clangMarcel Raad2017-07-101-1/+9
| | | | | | | | | | | | When building with Cygwin or MinGW, libtool uses a wrapper executable instead of a wrapper script [1], which is written in C and throws missing-variable-declarations warnings. Don't enable these warnings on Cygwin and MinGW in order to avoid warnings for every executable built, which spams the test suite output when using Cygwin's clang. [1] https://www.gnu.org/software/libtool/manual/html_node/Wrapper-executables.html Closes https://github.com/curl/curl/pull/1665
* curl_setup_once: Remove ERRNO/SET_ERRNO macrosJay Satiro2017-07-1014-93/+76
| | | | | | | | | | | | Prior to this change (SET_)ERRNO mapped to GetLastError/SetLastError for Win32 and regular errno otherwise. I reviewed the code and found no justifiable reason for conflating errno on WIN32 with GetLastError/SetLastError. All Win32 CRTs support errno, and any Win32 multithreaded CRT supports thread-local errno. Fixes https://github.com/curl/curl/issues/895 Closes https://github.com/curl/curl/pull/1589