summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* cmdline-opts/ipv6.d: fix mutexed on ipv4bagder/manpage-ipv6Daniel Stenberg2018-10-251-1/+1
| | | | | Reported-by: Alexxz on github Fixes #3171
* configure: remove CURL_CONFIGURE_CURL_SOCKLEN_TDaniel Stenberg2018-10-252-126/+0
| | | | | | | Follow-up to #3166 which did the cmake part of this. This type/define is not used. Closes #3168
* cmake: remove unused variablesRuslan Baratov2018-10-251-19/+0
| | | | | | | | | Remove variables: * HAVE_SOCKLEN_T * CURL_SIZEOF_CURL_SOCKLEN_T * CURL_TYPEOF_CURL_SOCKLEN_T Closes #3166
* urldata: Fix comment in headerMichael Kaufmann2018-10-251-1/+1
| | | | The "connecting" function is used by multiple protocols, not only FTP
* netrc: free temporary strings if memory allocation failsMichael Kaufmann2018-10-251-9/+39
| | | | | | | | - Change the inout parameters after all needed memory has been allocated. Do not change them if something goes wrong. - Free the allocated temporary strings if strdup() fails. Closes #3122
* config: Remove unused SIZEOF_VOIDPRuslan Baratov2018-10-242-6/+0
| | | | Closes #3162
* RELEASE-NOTES: syncedDaniel Stenberg2018-10-241-9/+21
|
* Fix for compiling with lwIP (3)Gisle Vanem2018-10-231-1/+1
| | | | lwIP on Windows does not have a WSAIoctl() function. But it do have a SO_SNDBUF option to lwip_setsockopt(). But it currently does nothing.
* Curl_follow: return better errors on URL problemsDaniel Stenberg2018-10-233-13/+12
| | | | | | ... by making the converter function global and accessible. Closes #3153
* Curl_follow: remove remaining free(newurl)Daniel Stenberg2018-10-231-3/+1
| | | | | | | | | Follow-up to 05564e750e8f0c. This function no longer frees the passed-in URL. Reported-by: Michael Kaufmann Bug: https://github.com/curl/curl/commit/05564e750e8f0c79016c680f301ce251e6e86155#commitcomm ent-30985666
* headers: end all headers with guard commentDaniel Gustafsson2018-10-234-4/+4
| | | | | | | | | | | Most headerfiles end with a /* <headerguard> */ comment, but it was missing from some. The comment isn't the most important part of our code documentation but consistency has an intrinsic value in itself. This adds header guard comments to the files that were lacking it. Closes #3158 Reviewed-by: Jay Satiro <raysatiro@yahoo.com> Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* CIPHERS.md: Mention the options used to set TLS 1.3 ciphersJay Satiro2018-10-231-3/+12
| | | | Closes https://github.com/curl/curl/pull/3159
* docs/BUG-BOUNTY: the sponsors actually decide the amountDaniel Stenberg2018-10-201-14/+8
| | | | | | | | Retract the previous approach as the sponsors will be the ones to set the final amounts. Closes #3152 [ci skip]
* multi: avoid double-freeDaniel Stenberg2018-10-192-10/+6
| | | | | | | | | | | Curl_follow() no longer frees the string. Make sure it happens in the caller function, like we normally handle allocations. This bug was introduced with the use of the URL API internally, it has never been in a release version Reported-by: Dario Weißer Closes #3149
* multi: make the closure handle "inherit" CURLOPT_NOSIGNALDaniel Stenberg2018-10-191-0/+2
| | | | | | | | Otherwise, closing that handle can still cause surprises! Reported-by: Martin Ankerl Fixes #3138 Closes #3147
* VS projects: add USE_IPV6Marcel Raad2018-10-196-328/+328
| | | | | | | The Visual Studio builds didn't use IPv6. Add it to all projects since Visual Studio 2008, which is verified to build via AppVeyor. Closes https://github.com/curl/curl/pull/3137
* config_win32: enable LDAPSMarcel Raad2018-10-191-0/+1
| | | | | | As done in the autotools and CMake builds by default. Closes https://github.com/curl/curl/pull/3137
* travis: add build for "configure --disable-verbose"Daniel Stenberg2018-10-186-13/+45
| | | | Closes #3144
* tool_cb_hdr: handle failure of rename()Kamil Dudka2018-10-171-2/+11
| | | | | | | Detected by Coverity. Closes #3140 Reviewed-by: Jay Satiro
* RELEASE-NOTES: syncedDaniel Stenberg2018-10-171-5/+19
|
* docs/SECURITY-PROCESS: the hackerone IBB program drops curlDaniel Stenberg2018-10-171-14/+0
| | | | ... now there's only BountyGraph.
* x509asn1: Fix SAN IP address verificationMatthew Whitehead2018-10-161-2/+2
| | | | | | | | | | | | | | | For IP addresses in the subject alternative name field, the length of the IP address (and hence the number of bytes to perform a memcmp on) is incorrectly calculated to be zero. The code previously subtracted q from name.end. where in a successful case q = name.end and therefore addrlen equalled 0. The change modifies the code to subtract name.beg from name.end to calculate the length correctly. The issue only affects libcurl with GSKit SSL, not other SSL backends. The issue is not a security issue as IP verification would always fail. Fixes #3102 Closes #3141
* INSTALL: mention mesalink in TLS sectionDaniel Gustafsson2018-10-151-0/+1
| | | | | | | | | Commit 57348eb97d1b8fc3742e02c6587d2d02ff592da5 added support for the MesaLink vtls backend, but missed updating the TLS section containing supported backends in the docs. Closes #3134 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* nonblock: fix unused parameter warningMarcel Raad2018-10-141-1/+2
| | | | | If USE_BLOCKING_SOCKETS is defined, curlx_nonblock's arguments are not used.
* Curl_follow: Always free the passed new URLMichael Kaufmann2018-10-132-1/+4
| | | | Closes #3124
* replace rawgit links [ci skip]Viktor Szakats2018-10-122-2/+2
| | | | | | Ref: https://rawgit.com/ "RawGit has reached the end of its useful life" Ref: https://news.ycombinator.com/item?id=18202481 Closes https://github.com/curl/curl/pull/3131
* docs/BUG-BOUNTY.md: for vulns published since Aug 1st 2018Daniel Stenberg2018-10-121-0/+4
| | | | [ci skip]
* travis: make distcheck scan for BOM markersDaniel Stenberg2018-10-122-1/+3
| | | | | | and remove BOM from projects/wolfssl_override.props Closes #3126
* CMake: remove BOMMarcel Raad2018-10-111-1/+1
| | | | | | | Accidentally aded in commit 1bb86057ff07083deeb0b00f8ad35879ec4d03ea. Reported-by: Viktor Szakats Ref: https://github.com/curl/curl/pull/3120#issuecomment-428673136
* transfer: fix typo in commentDaniel Gustafsson2018-10-101-1/+1
|
* docs: add "see also" links for SSL optionsMichael Kaufmann2018-10-106-6/+14
| | | | | | | - link TLS 1.2 and TLS 1.3 options - link proxy and non-proxy options Closes #3121
* AppVeyor: remove BDIR variable that sneaked in againMarcel Raad2018-10-101-1/+0
| | | | | Removed in ae762e1abebe3a5fe75658583c85059a0957ef6e, accidentally added again in 9f3be5672dc4dda30ab43e0152e13d714a84d762.
* CMake: disable -Wpedantic-ms-formatMarcel Raad2018-10-101-2/+2
| | | | | | | As done in the autotools build. This is required for MinGW, which supports only %I64 for printing 64-bit values, but warns about it. Closes https://github.com/curl/curl/pull/3120
* ldap: show precise LDAP call in error message on WindowsViktor Szakats2018-10-091-1/+7
| | | | | | | | | | Also add a unique but common text ('bind via') to make it easy to grep this specific failure regardless of platform. Ref: https://github.com/curl/curl/pull/878/files#diff-7a636f08047c4edb53a240f540b4ecf6R468 Closes https://github.com/curl/curl/pull/3118 Reviewed-by: Daniel Stenberg <daniel@haxx.se> Reviewed-by: Marcel Raad <Marcel.Raad@teamviewer.com>
* docs/DEPRECATE: minor reformat to render nicer on webDaniel Stenberg2018-10-091-1/+1
|
* CURLOPT_SSL_VERIFYSTATUS: Fix typoDaniel Gustafsson2018-10-091-2/+2
| | | | Changes s/OSCP/OCSP/ and bumps the copyright year due to the change.
* curl_setup: define NOGDI on WindowsMarcel Raad2018-10-091-0/+3
| | | | | | | This avoids an ERROR macro clash between <wingdi.h> and <arpa/tftp.h> on MinGW. Closes https://github.com/curl/curl/pull/3113
* Windows: fixes for MinGW targeting Windows VistaMarcel Raad2018-10-094-4/+8
| | | | | | | Classic MinGW has neither InitializeCriticalSectionEx nor GetTickCount64, independent of the target Windows version. Closes https://github.com/curl/curl/pull/3113
* TODO: fixed 'API for URL parsing/splitting'Daniel Stenberg2018-10-081-8/+0
|
* KNOWN_BUGS: Fix various typosDaniel Gustafsson2018-10-081-6/+6
| | | | | Closes #3112 Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* spelling fixes [ci skip]Viktor Szakats2018-10-0811-11/+11
| | | | | | | as detected by codespell 1.14.0 Closes https://github.com/curl/curl/pull/3114 Reviewed-by: Marcel Raad <Marcel.Raad@teamviewer.com>
* RELEASE-NOTES: syncedDaniel Stenberg2018-10-081-22/+37
|
* curl_ntlm_wb: check aprintf() return codesDaniel Stenberg2018-10-081-0/+6
| | | | | | ... when they return NULL we're out of memory and MUST return failure. closes #3111
* docs/BUG-BOUNTY: proposed additional docsDaniel Stenberg2018-10-081-0/+78
| | | | | | Bug bounty explainer. See https://bountygraph.com/programs/curl Closes #3067
* hostip: fix check on Curl_shuffle_addr return valueRick Deist2018-10-081-1/+1
| | | | Closes #3110
* FILE: fix CURLOPT_NOBODY and CURLOPT_HEADER outputDaniel Stenberg2018-10-0833-86/+82
| | | | | | | | | | | | | | | Now FILE transfers send headers to the header callback like HTTP and other protocols. Also made curl_easy_getinfo(...CURLINFO_PROTOCOL...) work for FILE in the callbacks. Makes "curl -i file://.." and "curl -I file://.." work like before again. Applied the bold header logic to them too. Regression from c1c2762 (7.61.0) Reported-by: Shaun Jackman Fixes #3083 Closes #3101
* gskit: make sure to terminate version stringDaniel Gustafsson2018-10-071-2/+1
| | | | | | | | | | | | In case a very small buffer was passed to the version function, it could result in the buffer not being NULL-terminated since strncpy() doesn't guarantee a terminator on an overflowed buffer. Rather than adding code to terminate (and handle zero-sized buffers), move to using snprintf() instead like all the other vtls backends. Closes #3105 Reviewed-by: Daniel Stenberg <daniel@haxx.se> Reviewed-by: Viktor Szakats <commit@vszakats.net>
* TODO: add LD_PRELOAD support on macOSDaniel Gustafsson2018-10-071-0/+6
| | | | Add DYLD_INSERT_LIBRARIES support to the TODO list. Reported in #2394.
* runtests: skip ld_preload tests on macOSDaniel Gustafsson2018-10-071-1/+1
| | | | | | | | | | The LD_PRELOAD functionality doesn't exist on macOS, so skip any tests requiring it. Fixes #2394 Closes #3106 Reported-by: Github user @jakirkham Reviewed-by: Daniel Stenberg <daniel@haxx.se>
* AppVeyor: use Debug builds to run testsMarcel Raad2018-10-071-5/+6
| | | | | | This enables more tests. Closes https://github.com/curl/curl/pull/3104
View Lorry Controller Status