summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* cmdline-opts: for non-perl builds copy from source treebagder/build-curl.1-ootDaniel Stenberg2017-04-211-1/+11
| | | | | ... for out-of-tree builds from tarballs that have a pre-built docs/curl.1 in the source.
* build: avoid GNU-makeism for docs/curl.1 useDaniel Stenberg2017-04-212-5/+5
| | | | | | ... but keep out-of-tree builds functional. Fixes #1432
* tests: remove the html and PDF versions from the tarballDaniel Stenberg2017-04-211-1/+0
|
* openssl: fix memory leak in servercertDaniel Stenberg2017-04-201-0/+1
| | | | ... when failing to get the server certificate.
* Revert "src/Makefile.am: avoid explicit $<"Daniel Stenberg2017-04-201-4/+6
| | | | | | This reverts commit 5b4cbcf11d5100ff793a8e9edbaa6fe1fc7495f5. Since it broke out-of-tree builds from tarballs. See discussion in #1432
* bump: start working on next releaseDaniel Stenberg2017-04-192-215/+9
|
* src/Makefile.am: avoid explicit $<Daniel Stenberg2017-04-191-6/+4
| | | | | | | ... since apparently "BSD make" doesn't support it. Reported-by: Thomas Klausner Fixes #1432
* THANKS: add contributors from 7.54.0 release notescurl-7_54_0Daniel Stenberg2017-04-191-0/+31
|
* RELEASE-NOTES: curl 7.54.0Daniel Stenberg2017-04-191-6/+23
|
* nss: fix MinGW compiler warningsMarcel Raad2017-04-181-5/+5
| | | | | | | | | | | | | | | | This fixes 3 warnings issued by MinGW: 1. PR_ImportTCPSocket actually has a paramter of type PROsfd instead of PRInt32, which is 64 bits on Windows. Fixed this by including the corresponding header file instead of redeclaring the function, which is supported even though it is in the private include folder. [1] 2. In 64-bit mode, size_t is 64 bits while CK_ULONG is 32 bits, so an explicit narrowing cast is needed. 3. Curl_timeleft returns time_t instead of long since commit 21aa32d30dbf319f2d336e0cb68d3a3235869fbb. [1] https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSPR/Reference/PR_ImportTCPSocket Closes https://github.com/curl/curl/pull/1393
* TLS: Fix switching off SSL session id when client cert is usedJay Satiro2017-04-1812-22/+26
| | | | | | | | | | | | | | Move the sessionid flag to ssl_primary_config so that ssl and proxy_ssl will each have their own sessionid flag. Regression since HTTPS-Proxy support was added in cb4e2be. Prior to that this issue had been fixed in 247d890, CVE-2016-5419. Bug: https://github.com/curl/curl/issues/1341 Reported-by: lijian996@users.noreply.github.com The new incarnation of this bug is called CVE-2017-7468 and is documented here: https://curl.haxx.se/docs/adv_20170419.html
* openssl: don't try to print nonexistant peer private keysDavid Benjamin2017-04-171-29/+3
| | | | | | | X.509 certificates carry public keys, not private keys. Fields corresponding to the private half of the key will always be NULL. Closes #1425
* openssl: fix thread-safety bugs in error-handlingDavid Benjamin2017-04-171-25/+27
| | | | | | | | | | | | | | | ERR_error_string with NULL parameter is not thread-safe. The library writes the string into some static buffer. Two threads doing this at once may clobber each other and run into problems. Switch to ERR_error_string_n which avoids this problem and is explicitly bounds-checked. Also clean up some remnants of OpenSSL 0.9.5 around here. A number of comments (fixed buffer size, explaining that ERR_error_string_n was added in a particular version) date to when ossl_strerror tried to support pre-ERR_error_string_n OpenSSLs. Closes #1424
* openssl: make SSL_ERROR_to_str more future-proofDavid Benjamin2017-04-171-16/+34
| | | | | | Rather than making assumptions about the values, use a switch-case. Closes #1424
* code: fix typos and style in commentsDaniel Gustafsson2017-04-173-9/+9
| | | | | | | A few random typos, and minor whitespace cleanups, found in comments while reading code. Closes #1423
* extern-scan.pl: strip trailing CRMarcel Raad2017-04-171-1/+3
| | | | | | | This makes test 1135 pass with CRLF checkouts. Ref: https://github.com/curl/curl/pull/1344#issuecomment-289243166 Closes https://github.com/curl/curl/pull/1422
* configure.ac: ignore CR after version numbersMarcel Raad2017-04-171-2/+2
| | | | | | | | | Ignore everything after the version numbers in LIBCURL_VERSION and LIBCURL_VERSION_NUM to ged rid of the extra CR character. This makes tests 1022 and 1023 pass on Linux with a CRLF checkout. Ref: https://github.com/curl/curl/pull/1344#issuecomment-289243166 Closes https://github.com/curl/curl/pull/1422
* .gitattributes: force shell scripts to LFMarcel Raad2017-04-172-0/+2
| | | | | | | | Bash on Linux errors out on CR characters. This makes tests 1221 and 1222 pass on Linux with a CRLF checkout. Ref: https://github.com/curl/curl/pull/1344#issuecomment-289243166 Closes https://github.com/curl/curl/pull/1422
* unit1303: fix compiler warningMarcel Raad2017-04-161-2/+2
| | | | | | | MinGW-w64 complains: warning: conversion to 'long int' from 'time_t {aka long long int}' may alter its value [-Wconversion] Fix this by using the correct type.
* RELEASE-NOTES: synced with 1451271e0Daniel Stenberg2017-04-161-6/+22
|
* http2: fix handle leak in error pathLarry Stefani2017-04-151-0/+1
| | | | | | Add missing newhandle free call in push_promise(). Closes #1416
* mbedtls: fix memory leak in error pathLarry Stefani2017-04-151-0/+1
| | | | | | Add missing our_ssl_sessionid free call in mbed_connect_step3(). Closes #1417
* curl-compilers.m4: turn implicit function declarations into errorsMarcel Raad2017-04-151-2/+5
| | | | | | | | | | | | | This adds -Werror-implicit-function-declaration for GCC 2.95+ so that these errors are visible at the point where they occur instead of only at link time. Implicit function declarations are illegal in C99 and C++ anyway, and the same warning has been turned into an error for ICC in commit 3072c5b8a127057aa922b7c51051bbb4a630b091. Ref: https://gcc.gnu.org/onlinedocs/gcc-2.95.2/gcc_2.html#SEC8 Ref: https://curl.haxx.se/mail/lib-2017-04/0001.html Closes https://github.com/curl/curl/pull/1419
* test1541: also test for CURL_PULL_WS2TCPIP_HMarcel Raad2017-04-121-2/+14
| | | | | Ref: https://github.com/curl/curl/issues/1408 Closes https://github.com/curl/curl/pull/1412
* tests/server/util: prefer <poll.h> over <sys/poll.h>Marcel Raad2017-04-121-3/+3
| | | | | | Follow-up to aa573c3c55cda72ec5ef677d87f6f46a53385f0c Ref: https://github.com/curl/curl/pull/1406
* Curl_expire_latest: ignore already expired timersDaniel Stenberg2017-04-112-4/+7
| | | | | | | | | If the existing timer is still in there but has expired, the new timer should be added. Reported-by: Rainer Canavan Bug: https://curl.haxx.se/mail/lib-2017-04/0030.html Closes #1407
* system.h: fix mingw sectionDaniel Stenberg2017-04-111-1/+14
| | | | | | Reported-by: Marcel Raad Fixes #1408 Closes #1409
* polarssl: unbreak build with versions < 1.3.8Marcel Raad2017-04-111-1/+1
| | | | | | | | ssl_session_init was only introduced in version 1.3.8, the penultimate version. The function only contains a memset, so replace it with that. Suggested-by: Jay Satiro Fixes https://github.com/curl/curl/issues/1401
* poll: prefer <poll.h> over <sys/poll.h>Marcel Raad2017-04-112-6/+6
| | | | | | | The POSIX standard location is <poll.h>. Using <sys/poll.h> results in warning spam when using the musl standard library. Closes https://github.com/curl/curl/pull/1406
* openssl: fix this statement may fall through [-Wimplicit-fallthrough=]Alexis La Goutte2017-04-101-0/+2
| | | | Closes #1402
* nss: load CA certificates even with --insecureKamil Dudka2017-04-101-2/+5
| | | | | | | | | ... because they may include an intermediate certificate for a client certificate and the intermediate certificate needs to be presented to the server, no matter if we verify the peer or not. Reported-by: thraidh Closes #851
* RELEASE-NOTES: synced with f9d1e9a27f7e1Daniel Stenberg2017-04-101-9/+30
|
* libcurl-thread.3: fixed a bad macro that caused test 1140 to failDan Fandrich2017-04-101-1/+1
|
* libcurl-thread.3: also mention threaded-resolverDaniel Stenberg2017-04-091-4/+5
| | | | | Reported-by: Alex Bligh Bug: https://curl.haxx.se/mail/lib-2017-04/0044.html
* .github/stale.yml: enable the stale botDaniel Stenberg2017-04-091-0/+17
| | | | | | | | | | | Issues and PRs with no activity for 180 days will get marked as stale, and if no further activity happens within 14 more days, the issue gets closed. This follows our established policy of not letting stalled bugs "get in the way": https://curl.haxx.se/docs/bugs.html#Closing_off_stalled_bugs Closes #1398
* CURLINFO_SCHEME.3: fix variable typeJay Satiro2017-04-081-6/+9
| | | | - Change documented param type to char ** from incorrect long *.
* INSTALL.md: fix secure transport configure argumentsMarcel Raad2017-04-081-1/+1
| | | | --without-ssl is needed instead of --with-winssl.
* vtls: fix unreferenced variable warningsMarcel Raad2017-04-082-2/+4
| | | | ... by moving the variables into the correct #ifdef block.
* BUGS: "Bugs in old versions"Daniel Stenberg2017-04-071-0/+33
|
* system.h: add section for tccDaniel Stenberg2017-04-071-0/+13
| | | | Closes #1397
* schannel: fix compiler warningsMarcel Raad2017-04-071-3/+3
| | | | | | | | | | When UNICODE is not defined, the Curl_convert_UTF8_to_tchar macro maps directly to its argument. As it is declared as a pointer to const and InitializeSecurityContext expects a pointer to non-const, both MSVC and MinGW issue a warning about implicitly casting away the const. Fix this by declaring the variables as pointers to non-const. Closes https://github.com/curl/curl/pull/1394
* sspi: print out InitializeSecurityContext() error messageIsaac Boukris2017-04-071-0/+3
| | | | | | | Reported-by: Carsten (talksinmath) Fixes #1384 Closes #1395
* gtls: fix compiler warningMarcel Raad2017-04-061-2/+2
| | | | | Curl_timeleft returns time_t instead of long since commit 21aa32d30dbf319f2d336e0cb68d3a3235869fbb.
* test1606: verify speedcheckDaniel Stenberg2017-04-064-2/+121
|
* low_speed_limit: improved function for longer time periodsDaniel Stenberg2017-04-061-29/+30
| | | | | | | | | Previously, periods of fast speed between periods of slow speed would not count and could still erroneously trigger a timeout. Reported-by: Paul Harris Fixes #1345 Closes #1390
* system.h: set sizeof long to 4 on "default 32 bit" systemsDaniel Stenberg2017-04-061-0/+1
| | | | | Triggered a test failure on test 1541 for the build known as "Linux 4.4 i686 tcc 0.9.26 glibc 2.20"
* nss: fix build after e60fe20fdf94e829ba5fce33f7a9d6c281149f7dMarcel Raad2017-04-062-16/+9
| | | | | | Curl_llist_alloc is now Curl_llist_init. Closes https://github.com/curl/curl/pull/1391
* INSTALL.cmake: more problemsDaniel Stenberg2017-04-061-1/+2
| | | | and mention specific issues where they are discussed
* test1541: ignore the curl_off_t variable type name comparisonDaniel Stenberg2017-04-051-0/+8
| | | | | | | ... the sizes and the formatting strings are what's really important and avoids problems with int64_t vs "long long". Bug: https://curl.haxx.se/mail/lib-2017-04/0019.html
* Revert "configure: prefer 'long long' to int64_t for curl_off_t"Daniel Stenberg2017-04-051-2/+2
| | | | | | This reverts commit 81284374bf3c670d2050f8562edeb69f060b07cc. Due to mingw32 brekage.
View Lorry Controller Status