summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* progress: fix rate-limit for high speed transfersbagder/rate-limit-longer-periodDaniel Stenberg2018-03-153-44/+62
| | | | | | | | | | | | | | Due to very frequent updates of the rate limit "window", it could attempt to limit within the same milliseconds and that then made the calculations wrong, leading to it not behaving correctly on very fast transfers. This new logic updates the rate limit "window" to be no shorter than the last three seconds and only updating the timestamps for this when switching between the states TOOFAST/PERFORM. Reported-by: 刘佩东 Fixes #2396
* transfer: make HTTP without headers count correct body sizeDaniel Stenberg2018-03-155-5/+60
| | | | | | | | This is what "HTTP/0.9" basically looks like. Reported on IRC Closes #2382
* test1208: marked flakyDaniel Stenberg2018-03-151-0/+1
| | | | It fails somewhere between every 3rd to 10th travis-CI run
* SECURITY-PROCESS: mention how we write/add advisoriesDaniel Stenberg2018-03-141-3/+26
|
* FTP: fix typo in recursive callback detection for seekingdasimx2018-03-141-1/+1
| | | | Fixes #2380
* release: 7.59.0curl-7_59_0Daniel Stenberg2018-03-132-9/+36
|
* tests/.../spnego.py: fix identifier typoKamil Dudka2018-03-131-1/+1
| | | | | | | | | | | | | | | Detected by Coverity Analysis: Error: IDENTIFIER_TYPO: curl-7.58.0/tests/python_dependencies/impacket/spnego.py:229: identifier_typo: Using "SuportedMech" appears to be a typo: * Identifier "SuportedMech" is only known to be referenced here, or in copies of this code. * Identifier "SupportedMech" is referenced elsewhere at least 4 times. curl-7.58.0/tests/python_dependencies/impacket/smbserver.py:2651: identifier_use: Example 1: Using identifier "SupportedMech". curl-7.58.0/tests/python_dependencies/impacket/smbserver.py:2308: identifier_use: Example 2: Using identifier "SupportedMech". curl-7.58.0/tests/python_dependencies/impacket/spnego.py:252: identifier_use: Example 3: Using identifier "SupportedMech" (2 total uses in this function). curl-7.58.0/tests/python_dependencies/impacket/spnego.py:229: remediation: Should identifier "SuportedMech" be replaced by "SupportedMech"? Closes #2379
* CURLOPT_COOKIEFILE.3: "-" as file name means stdinDaniel Stenberg2018-03-131-2/+3
| | | | | | | Reported-by: Aron Bergman Bug: https://curl.haxx.se/mail/lib-2018-03/0049.html [ci skip]
* Revert "hostip: fix compiler warning: 'variable set but not used'"Daniel Stenberg2018-03-121-1/+1
| | | | | | | This reverts commit a577059f92fc65bd6b81717f0737f897a5b34248. The assignment really needs to be there or we risk working with an uninitialized pointer.
* limit-rate: fix compiler warningMichael Kaufmann2018-03-121-1/+1
| | | | follow-up to 72a0f62
* checksrc.pl: add -i and -m optionsViktor Szakats2018-03-121-6/+18
| | | | | To sync it with changes made for the libssh2 project. Also cleanup some whitespace.
* curl-openssl.m4: fix spelling [ci skip]Viktor Szakats2018-03-121-1/+1
|
* FAQ: fix a broken URL [ci skip]Viktor Szakats2018-03-121-1/+1
|
* http2: mark the connection for close on GOAWAYDaniel Stenberg2018-03-123-21/+26
| | | | | | | | | ... don't consider it an error! Assisted-by: Jay Satiro Reported-by: Łukasz Domeradzki Fixes #2365 Closes #2375
* credits: Viktor prefers without accentDaniel Stenberg2018-03-122-2/+2
|
* openldap: white space changes, fixed up the copyright yearsDaniel Stenberg2018-03-121-18/+19
|
* openldap: check ldap_get_attribute_ber() results for NULL before usingDaniel Stenberg2018-03-121-4/+4
| | | | | | CVE-2018-1000121 Reported-by: Dario Weisser Bug: https://curl.haxx.se/docs/adv_2018-97a2.html
* FTP: reject path components with control codesDaniel Stenberg2018-03-123-4/+47
| | | | | | | | | | | | | | | Refuse to operate when given path components featuring byte values lower than 32. Previously, inserting a %00 sequence early in the directory part when using the 'singlecwd' ftp method could make curl write a zero byte outside of the allocated buffer. Test case 340 verifies. CVE-2018-1000120 Reported-by: Duy Phan Thanh Bug: https://curl.haxx.se/docs/adv_2018-9cd6.html
* readwrite: make sure excess reads don't go beyond buffer endDaniel Stenberg2018-03-121-2/+7
| | | | | | | CVE-2018-1000122 Bug: https://curl.haxx.se/docs/adv_2018-b047.html Detected by OSS-fuzz
* BUGS: updated link to security processDaniel Stenberg2018-03-121-1/+1
|
* limit-rate: kick in even before "limit" data has been receivedDaniel Stenberg2018-03-112-23/+29
| | | | | | | | ... and make sure to avoid integer overflows with really large values. Reported-by: 刘佩东 Fixes #2371 Closes #2373
* docs/SECURITY.md -> docs/SECURITY-PROCESS.mdDaniel Stenberg2018-03-112-2/+2
|
* SECURITY.md: call it the security processDaniel Stenberg2018-03-111-4/+4
|
* Curl_range: fix FTP-only and FILE-only buildsMichael Kaufmann2018-03-111-1/+1
| | | | follow-up to e04417d
* hostip: fix compiler warning: 'variable set but not used'Michael Kaufmann2018-03-111-1/+1
|
* HTTP: allow "header;" to replace an internal header with a blank oneDaniel Stenberg2018-03-119-86/+285
| | | | | | Reported-by: Michael Kaufmann Fixes #2357 Closes #2362
* http2: verbose output new MAX_CONCURRENT_STREAMS valuesDaniel Stenberg2018-03-101-1/+2
| | | | ... as it is interesting for many users.
* SECURITY: distros' max embargo time is 14 days nowDaniel Stenberg2018-03-091-1/+1
|
* curl tool: accept --compressed also if Brotli is enabled and zlib is not.Patrick Monnerat2018-03-081-2/+3
|
* THANKS + mailmap: remove duplicates, fixup full namesDaniel Stenberg2018-03-052-1/+5
|
* WolfSSL: adding TLSv1.3sergii.kavunenko2018-03-051-1/+11
| | | | Closes #2349
* RELEASE-NOTES/THANKS: synced with cc1d4c505Daniel Stenberg2018-03-042-9/+52
|
* winbuild: prefer documented zlib library namesrichardthe3rd2018-03-041-0/+14
| | | | | | | | | | | | Check for existence of import and static libraries with documented names and use them if they do. Fallback to previous names. According to https://github.com/madler/zlib/blob/master/win32/README-WIN32.txt on Windows, the names of the import library is "zdll.lib" and static library is "zlib.lib". closes #2354
* krb5: use nondeprecated functionsMarcel Raad2018-03-041-3/+3
| | | | | | | | | | | | | | | gss_seal/gss_unseal have been deprecated in favor of gss_wrap/gss_unwrap with GSS-API v2 from January 1997 [1]. The first version of "The Kerberos Version 5 GSS-API Mechanism" [2] from June 1996 already says "GSS_Wrap() (formerly GSS_Seal())" and "GSS_Unwrap() (formerly GSS_Unseal())". Use the nondeprecated functions to avoid deprecation warnings. [1] https://tools.ietf.org/html/rfc2078 [2] https://tools.ietf.org/html/rfc1964 Closes https://github.com/curl/curl/pull/2356
* curl.1: mention how to add numerical IP addresses in NO_PROXYDaniel Stenberg2018-03-041-3/+6
|
* CURLOPT_NOPROXY.3: mention how to list numerical IPv6 addressesDaniel Stenberg2018-03-041-1/+6
|
* NO_PROXY: fix for IPv6 numericals in the URLDaniel Stenberg2018-03-043-2/+63
| | | | | | | | Added test 1265 that verifies. Reported-by: steelman on github Fixes #2353 Closes #2355
* build: get CFLAGS (including -werror) used for examples and testsDaniel Stenberg2018-03-045-6/+13
| | | | | | ... so that the CI and more detects compiler warnings/errors properly! Closes #2337
* curl_ctype: fix macro redefinition warningsMarcel Raad2018-03-031-0/+8
| | | | | | | | | On MinGW and Cygwin, GCC and clang have been complaining about macro redefinitions since 4272a0b0fc49a1ac0ceab5c4a365c9f6ab8bf8e2. Fix this by undefining the macros before redefining them as suggested in https://github.com/curl/curl/pull/2269. Suggested-by: Daniel Stenberg
* unit1307: proper cleanup on OOM to fix torture testsDan Fandrich2018-03-021-8/+18
|
* unit1309: fix warning on Windows x64Marcel Raad2018-02-283-17/+17
| | | | | | | | | | When targeting x64, MinGW-w64 complains about conversions between 32-bit long and 64-bit pointers. Fix this by reusing the GNUTLS_POINTER_TO_SOCKET_CAST / GNUTLS_SOCKET_TO_POINTER_CAST logic from gtls.c, moving it to warnless.h as CURLX_POINTER_TO_INTEGER_CAST / CURLX_INTEGER_TO_POINTER_CAST. Closes https://github.com/curl/curl/pull/2341
* travis: update compiler versionsMarcel Raad2018-02-281-9/+9
| | | | | | Update clang to version 3.9 and GCC to version 6. Closes https://github.com/curl/curl/pull/2345
* docs/MANUAL: formfind.pl is not accessible on the site anymoreDaniel Stenberg2018-02-261-2/+1
| | | | Fixes #2342
* curl-openssl.m4: Fix version check for OpenSSL 1.1.1Jay Satiro2018-02-241-1/+10
| | | | | | | | | | - Add OpenSSL 1.1.1 to the header/library version lists. - Detect OpenSSL 1.1.1 library using its function ERR_clear_last_mark, which was added in that version. Prior to this change an erroneous header/library mismatch was caused by lack of OpenSSL 1.1.1 detection. I tested using openssl-1.1.1-pre1.
* lib655: silence compiler warningViktor Szakats2018-02-231-1/+1
| | | | Closes https://github.com/curl/curl/pull/2335
* spelling fixesViktor Szakats2018-02-2332-48/+49
| | | | | | | | Detected using the `codespell` tool. Also contains one URL protocol upgrade. Closes https://github.com/curl/curl/pull/2334
* projects/README: remove reference to dead IDN link/packageDaniel Stenberg2018-02-241-7/+4
| | | | | | Reported-by: Stefan Kanthak and Rod Widdowson Fixes #2325
* winbuild: Use macros for the names of some build utilitiesRod Widdowson2018-02-231-2/+7
| | | | | | | | | | - Add macros to the top of the makefile for rc and mt utilities so that it is easier to change their locations. Bug: https://curl.haxx.se/mail/lib-2018-02/0075.html Reported-by: Stefan Kanthak Closes https://github.com/curl/curl/issues/2329
* TODO: remove "sha-256 digest", added in 2b5b37cb9109e7c2Daniel Stenberg2018-02-231-10/+0
|
* curl_share_setopt.3: connection cache is shared within multi handlesDaniel Stenberg2018-02-231-3/+6
|
View Lorry Controller Status