summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* configure: add basic test of --with-ssl prefixbagder/configure-detect-bad-sslprefixDaniel Stenberg2018-05-231-1/+3
| | | | | | | | | | When given a prefix, the $PREFIX_OPENSSL/lib/openssl.pc or $PREFIX_OPENSSL/include/openssl/ssl.h files must be present or cause an error. Helps users detect when giving configure the wrong path. Reported-by: Oleg Pudeyev Assisted-by: Per Malmberg Fixes #2580
* tftp: make sure error is zero terminated before printfing itDaniel Stenberg2018-05-221-1/+4
|
* configure: add missing m4/ax_compile_check_sizeof.m4Daniel Stenberg2018-05-221-0/+115
| | | | follow-up to mistake in 6876ccf90b4
* schannel: make CAinfo parsing resilient to CR/LFJohannes Schindelin2018-05-221-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | OpenSSL has supported --cacert for ages, always accepting LF-only line endings ("Unix line endings") as well as CR/LF line endings ("Windows line endings"). When we introduced support for --cacert also with Secure Channel (or in cURL speak: "WinSSL"), we did not take care to support CR/LF line endings, too, even if we are much more likely to receive input in that form when using Windows. Let's fix that. Happily, CryptQueryObject(), the function we use to parse the ca-bundle, accepts CR/LF input already, and the trailing LF before the END CERTIFICATE marker catches naturally any CR/LF line ending, too. So all we need to care about is the BEGIN CERTIFICATE marker. We do not actually need to verify here that the line ending is CR/LF. Just checking for a CR or an LF is really plenty enough. Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de> Closes https://github.com/curl/curl/pull/2592
* CURLOPT_ACCEPT_ENCODING.3: add brotli and clarify a bitDaniel Stenberg2018-05-221-6/+14
|
* RELEASE-NOTES: syncedDaniel Stenberg2018-05-221-4/+24
|
* KNOWN_BUGS: mention the -O with %-encoded file namesDaniel Stenberg2018-05-211-2/+9
| | | | Closes #2573
* checksrc: make sure sizeof() is used *with* parenthesesDaniel Stenberg2018-05-2125-64/+77
| | | | | | ... and unify the source code to adhere. Closes #2563
* curl: added --styled-outputDaniel Stenberg2018-05-217-5/+19
| | | | | | | It is enabled by default, so --no-styled-output will switch off the detection/use of bold headers. Closes #2538
* curl: show headers in boldDaniel Stenberg2018-05-2122-55/+81
| | | | | | | | | | | | | | | | | | The feature is only enabled if the output is believed to be a tty. -J: There's some minor differences and improvements in -J handling, as now J should work with -i and it actually creates a file first using the initial name and then *renames* that to the one found in Content-Disposition (if any). -i: only shows headers for HTTP transfers now (as documented). Previously it would also show for pieces of the transfer that were HTTP (for example when doing FTP over a HTTP proxy). -i: now shows trailers as well. Previously they were not shown at all. --libcurl: the CURLOPT_HEADER is no longer set, as the header output is now done in the header callback.
* configure: compile-time SIZEOF checksDaniel Stenberg2018-05-211-8/+8
| | | | | | | | | ... instead of exeucting code to get the size. Removes the use of LD_LIBRARY_PATH for this. Fixes #2586 Closes #2589 Reported-by: Bernhard Walle
* configure: replace AC_TRY_RUN with CURL_RUN_IFELSEDaniel Stenberg2018-05-212-3/+4
| | | | | | | | ... and export LD_LIBRARY_PATH properly. This is a follow-up from 2d4c215. Fixes #2586 Reported-by: Bernhard Walle
* docs: clarify CURLOPT_HTTPGET somewhatDaniel Stenberg2018-05-213-9/+14
| | | | | Reported-by: bsammon on github Fixes #2590
* curl_fnmatch: only allow two asterisks for matchingDaniel Stenberg2018-05-183-7/+3
| | | | | | | | | | | | | The previous limit of 5 can still end up in situation that takes a very long time and consumes a lot of CPU. If there is still a rare use case for this, a user can provide their own fnmatch callback for a version that allows a larger set of wildcards. This commit was triggered by yet another OSS-Fuzz timeout due to this. Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8369 Closes #2587
* checksrc: fix too long lineDaniel Stenberg2018-05-181-1/+1
| | | | follow-up to e05ad5d
* docs: mention HAproxy protocol "version 1"Aleks2018-05-186-10/+10
| | | | | | ...as there's also a version 2. Closes #2579
* examples/progressfunc: make it build on older libcurlsDaniel Stenberg2018-05-181-10/+29
| | | | | | | | This example was changed in ce2140a8c1 to use the new microsecond based getinfo option. This change makes it conditionally keep using the older option so that the example still builds with older libcurl versions. Closes #2584
* stub_gssapi: fix numerous 'unused parameter' warningsDaniel Stenberg2018-05-181-2/+50
| | | | follow-up to d9e92fd9fd1d
* getinfo: add microsecond precise timers for various intervalsPhilip Prindeville2018-05-1723-56/+585
| | | | | | | | | | | | | | | | | Provide a set of new timers that return the time intervals using integer number of microseconds instead of floats. The new info names are as following: CURLINFO_APPCONNECT_TIME_T CURLINFO_CONNECT_TIME_T CURLINFO_NAMELOOKUP_TIME_T CURLINFO_PRETRANSFER_TIME_T CURLINFO_REDIRECT_TIME_T CURLINFO_STARTTRANSFER_TIME_T CURLINFO_TOTAL_TIME_T Closes #2495
* openssl: acknowledge --tls-max for default version tooDaniel Stenberg2018-05-171-2/+1
| | | | | | | | | ... previously it only used the max setting if a TLS version was also explicitly asked for. Reported-by: byte_bucket Fixes #2571 Closes #2572
* bump: start working on the pending 7.61.0Daniel Stenberg2018-05-172-231/+13
|
* tests/libtest/Makefile: Do not unconditionally add gcc-specific flagsDagobert Michelsen2018-05-161-1/+1
| | | | | | The warning flag leads e.g. Sun Studio compiler to bail out. Closes #2576
* schannel_verify: fix build for non-schannelDaniel Stenberg2018-05-161-2/+1
|
* rand: fix typoJay Satiro2018-05-161-1/+1
|
* schannel: disable manual verify if APIs not availableJay Satiro2018-05-163-4/+37
| | | | | .. because original MinGW and old compilers do not have the Windows API definitions needed to support manual verification.
* schannel: disable client cert option if APIs not availableArchangel_SDY2018-05-161-0/+15
| | | | | | | Original MinGW targets Windows 2000 by default, which lacks some APIs and definitions for this feature. Disable it if these APIs are not available. Closes https://github.com/curl/curl/pull/2522
* RELEASE-NOTES: 7.60.0 releasecurl-7_60_0Daniel Stenberg2018-05-151-14/+35
|
* THANKS: added people from the curl 7.60.0 releaseDaniel Stenberg2018-05-151-1/+37
|
* docs/libcurl/index.html: removedDaniel Stenberg2018-05-152-73/+2
| | | | | | | The HTML files are long gone from the dist, now remove the last HTML file pointing to those missing files. d
* http2: remove unused variablesteini20002018-05-141-4/+0
| | | | Closes #2570
* http2: use easy handle of stream for loggingsteini20002018-05-141-2/+2
|
* gcc: disable picky gcc-8 function pointer warnings in two placesDaniel Stenberg2018-05-142-2/+12
| | | | | | Reported-by: Rikard Falkeborn Bug: #2560 Closes #2569
* http2: use the correct function pointer typedefDaniel Stenberg2018-05-143-22/+18
| | | | | | | Fixes gcc-8 picky compiler warnings Reported-by: Rikard Falkeborn Bug: #2560 Closes #2568
* CODE_STYLE: mention return w/o parens, but sizeof withDaniel Stenberg2018-05-141-38/+46
| | | | | | ... and remove the github markdown syntax so that it renders better on the web site. Also, don't use back-ticks inlined to allow the CSS to highlight source code better.
* examples: Fix format specifiersRikard Falkeborn2018-05-147-20/+20
| | | | Closes #2561
* tool: Fix format specifiersRikard Falkeborn2018-05-142-3/+3
|
* ntlm: Fix format specifiersRikard Falkeborn2018-05-141-3/+3
|
* tests: Fix format specifiersRikard Falkeborn2018-05-148-13/+13
|
* lib: Fix format specifiersRikard Falkeborn2018-05-145-8/+8
|
* contributors.sh: use "on github", not atDaniel Stenberg2018-05-141-1/+2
|
* http2: getsock fix for uploadsDaniel Stenberg2018-05-141-1/+4
| | | | | | | | | When there's an upload in progress, make sure to wait for the socket to become writable. Detected-by: steini2000 on github Bug: #2520 Closes #2567
* pingpong: fix response cache memcpy overflowDaniel Stenberg2018-05-141-1/+4
| | | | | | | | | | | Response data for a handle with a large buffer might be cached and then used with the "closure" handle when it has a smaller buffer and then the larger cache will be copied and overflow the new smaller heap based buffer. Reported-by: Dario Weisser CVE: CVE-2018-1000300 Bug: https://curl.haxx.se/docs/adv_2018-82c2.html
* http: restore buffer pointer when bad response-line is parsedDaniel Stenberg2018-05-141-1/+5
| | | | | | | | | | | ... leaving the k->str could lead to buffer over-reads later on. CVE: CVE-2018-1000301 Assisted-by: Max Dymond Detected by OSS-Fuzz. Bug: https://curl.haxx.se/docs/adv_2018-b138.html Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105
* cookies: do not take cookie name as a parameterPatrick Monnerat2018-05-133-2/+62
| | | | | | | | | | | | RFC 6265 section 4.2.1 does not set restrictions on cookie names. This is a follow-up to commit 7f7fcd0. Also explicitly check proper syntax of cookie name/value pair. New test 1155 checks that cookie names are not reserved words. Reported-By: anshnd at github Fixes #2564 Closes #2566
* smb: reject negative file sizesDaniel Stenberg2018-05-121-4/+10
| | | | | | | Assisted-by: Max Dymond Detected by OSS-Fuzz Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8245
* setup_transfer: deal with both sockets being -1Daniel Stenberg2018-05-111-1/+2
| | | | | Detected by Coverity; CID 1435559. Follow-up to f8d608f38d00. It would index the array with -1 if neither index was a socket.
* travis: add build using NSSDaniel Stenberg2018-05-101-1/+8
| | | | Closes #2558
* openssl: change FILE ops to BIO opsSunny Purushe2018-05-101-15/+41
| | | | | | | | | To make builds with VS2015 work. Recent changes in VS2015 _IOB_ENTRIES handling is causing problems. This fix changes the OpenSSL backend code to use BIO functions instead of FILE I/O functions to circumvent those problems. Closes #2512
* travis: add a build using WolfSSLDaniel Stenberg2018-05-091-1/+27
| | | | | | Assisted-by: Dan Fandrich Closes #2528
* RELEASE-NOTES: typoDaniel Stenberg2018-05-071-1/+1
|
View Lorry Controller Status