summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Curl_fillreadbuffer: avoid double-free trailer buf on errorbagder/trailer-buf-freeDaniel Stenberg2019-09-093-12/+17
| | | | | | | Reviewed-by: Jay Satiro Reported-by: Thomas Vegas Closes #4307
* tool_setopt: handle a libcurl build without netrc supportDaniel Stenberg2019-09-091-0/+10
| | | | | | Reported-by: codesniffer13 on github Fixes #4302 Closes #4305
* security:read_data fix bad realloc()Daniel Stenberg2019-09-091-4/+2
| | | | | | | ... that could end up a double-free CVE-2019-5481 Bug: https://curl.haxx.se/docs/CVE-2019-5481.html
* tftp: Alloc maximum blksize, and use default unless OACK is receivedThomas Vegas2019-09-091-3/+9
| | | | | | | | Fixes potential buffer overflow from 'recvfrom()', should the server return an OACK without blksize. Bug: https://curl.haxx.se/docs/CVE-2019-5482.html CVE-2019-5482
* tftp: return error when packet is too small for optionsThomas Vegas2019-09-091-20/+33
|
* KNOWN_BUGS/TODO: cleanup and remove outdated issuesDaniel Stenberg2019-09-052-258/+32
|
* RELEASE-NOTES: syncedDaniel Stenberg2019-09-041-5/+20
|
* netrc: free 'home' on errorDaniel Stenberg2019-09-031-7/+12
| | | | | | | | Follow-up to f9c7ba9096ec2 Coverity CID 1453474 Closes #4291
* urldata: avoid 'generic', use dedicated pointersDaniel Stenberg2019-09-033-22/+25
| | | | | | For the 'proto' union within the connectdata struct. Closes #4290
* cleanup: move functions out of url.c and make them staticDaniel Stenberg2019-09-035-229/+220
| | | | Closes #4289
* smtp: check for and bail out on too short EHLO responseDaniel Stenberg2019-09-031-1/+5
| | | | | | | | | | | | Otherwise, a three byte response would make the smtp_state_ehlo_resp() function misbehave. Credit to OSS-Fuzz Bug: https://crbug.com/oss-fuzz/16918 Assisted-by: Max Dymond Closes #4287
* smb: init *msg to NULL in smb_send_and_recv()Daniel Stenberg2019-09-021-0/+1
| | | | | | | | | ... it might otherwise return OK from this function leaving that pointer uninitialized. Bug: https://crbug.com/oss-fuzz/16907 Closes #4286
* ROADMAP: updated after recent user pollDaniel Stenberg2019-09-021-16/+33
| | | | In rough prio order
* THANKS: remove duplicateDaniel Stenberg2019-08-312-1/+1
|
* Curl_addr2string: take an addrlen argument tooDaniel Stenberg2019-08-315-16/+24
| | | | | | | | | | | This allows the function to figure out if a unix domain socket has a file name or not associated with it! When a socket is created with socketpair(), as done in the fuzzer testing, the path struct member is uninitialized and must not be accessed. Bug: https://crbug.com/oss-fuzz/16699 Closes #4283
* CMake: remove needless newlines at end of gss variablesRolf Eike Beer2019-08-311-0/+4
|
* CI: remove duplicate configure flag for LGTM.comRolf Eike Beer2019-08-311-1/+1
|
* CMake: use platform dependent name for dlopen() libraryRolf Eike Beer2019-08-311-1/+1
| | | | Closes #4279
* quiche: expire when poll returned dataDaniel Stenberg2019-08-301-0/+3
| | | | | | ... to make sure we continue draining the queue until empty Closes #4281
* quiche: decrease available buffer size, don't assign it!Daniel Stenberg2019-08-301-1/+1
| | | | Found-by: Jeremy Lainé
* RELEASE-NOTES: syncedDaniel Stenberg2019-08-291-9/+15
|
* curl: fix include conditionslufia2019-08-292-1/+5
|
* plan9: fix installation instructionslufia2019-08-291-4/+4
| | | | Closes #4276
* ngtcp2: on h3 stream close, call expireDaniel Stenberg2019-08-291-1/+1
| | | | | | ... to trigger a new read to detect the stream close! Closes #4275
* ngtcp2: build latest ngtcp2 and ngtcp2_crypto_opensslTatsuhiro Tsujikawa2019-08-292-140/+8
| | | | Closes #4278
* ngtcp2: set flow control window to stream buffer sizeDaniel Stenberg2019-08-281-3/+4
| | | | Closes #4274
* CURLOPT_HEADERFUNCTION.3: clarifyChristopher Head2019-08-281-1/+4
| | | | Closes #4273
* CURLINFO docs: mention that in redirects times are addedDaniel Stenberg2019-08-2812-12/+37
| | | | | | Suggested-by: Brandon Dong Fixes #4250 Closes #4269
* travis: enable ngtcp2 builds againDaniel Stenberg2019-08-281-15/+15
| | | | | | Switched to the openssl-quic-draft-22 openssl branch. Closes #4271
* HTTP3: switched openssl branch to useDaniel Stenberg2019-08-271-1/+1
|
* ngtcp2: Build with latest ngtcp2 and ngtcp2_crypto_opensslTatsuhiro Tsujikawa2019-08-276-1189/+218
| | | | Closes #4270
* http2: when marked for closure and wanted to close == OKDaniel Stenberg2019-08-261-0/+5
| | | | | | | | | It could otherwise return an error even when closed correctly if GOAWAY had been received previously. Reported-by: Tom van der Woerdt Fixes #4267 Closes #4268
* RELEASE-NOTES: syncedDaniel Stenberg2019-08-261-6/+26
|
* build-openssl: fix build with Visual Studio 2019Daniel Stenberg2019-08-261-1/+18
| | | | | | | Reviewed-by: Marcel Raad Contributed-by: osabc on github Fixes #4188 Closes #4266
* vauth: return CURLE_AUTH_ERROR on gss_init_sec_context() failureKamil Dudka2019-08-263-3/+3
| | | | | | This is a follow-up to https://github.com/curl/curl/pull/3864 . Closes #4224
* KNOWN_BUGS: USE_UNIX_SOCKETS on WindowsDaniel Stenberg2019-08-261-0/+8
| | | | Closes #4040
* quiche: send the HTTP body correctly on callback uploadsDaniel Stenberg2019-08-261-1/+10
| | | | Closes #4265
* travis: disable ngtcp2 builds (temporarily)Daniel Stenberg2019-08-261-14/+14
| | | | | | Just too many API changes right now Closes #4264
* ngtcp2: add support for SSLKEYLOGFILEDaniel Stenberg2019-08-251-0/+18
| | | | Closes #4260
* ngtcp2: improve h3 response receivingDaniel Stenberg2019-08-251-9/+26
| | | | Closes #4259
* ngtcp2: use nghttp3_version()Daniel Stenberg2019-08-251-1/+2
|
* ngtcp2: sync with upstream API changesDaniel Stenberg2019-08-253-114/+80
| | | | Assisted-by: Tatsuhiro Tsujikawa
* scp: fix directory name length used in memcpyKyle Abramowitz2019-08-241-1/+1
| | | | | | | Fix read off end of array due to bad pointer math in getworkingpath for SCP home directory case. Closes #4258
* http: the 'closed' struct field is used by both ngh2 and ngh3Daniel Stenberg2019-08-242-7/+1
| | | | | | | | and remove 'header_recvbuf', not used for anything Reported-by: Jeremy Lainé Closes #4257
* ngtcp2: accept upload via callbackDaniel Stenberg2019-08-235-19/+153
| | | | Closes #4256
* defines: avoid underscore-prefixed definesDaniel Stenberg2019-08-2313-332/+332
| | | | | | | | | | | Double-underscored or underscore plus uppercase letter at least. ... as they're claimed to be reserved. Reported-by: patnyb on github Fixes #4254 Closes #4255
* travis: add a build using ngtcp2 + nghttp3 (and a patched OpenSSL)Daniel Stenberg2019-08-221-0/+36
| | | | | | Runs no tests Closes #4253
* travis: bump to using nghttp2 version 1.39.2Daniel Stenberg2019-08-211-5/+5
| | | | Closes #4252
* docs/examples/curlx: fix errorsGisle Vanem2019-08-211-3/+3
| | | | | | Initialise 'mimetype' and require the -p12 arg. Closes #4248
* cleanup: remove DOT_CHAR completelyDaniel Stenberg2019-08-203-12/+2
| | | | | | | | | | | | Follow-up to f9c7ba9096ec The use of DOT_CHAR for ".ssh" was probably a mistake and is removed now. Pointed-out-by: Gisle Vanem Bug: https://github.com/curl/curl/pull/4230#issuecomment-522960638 Closes #4247
View Lorry Controller Status