summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* travis: build the examples toobagder/travis-examplesDaniel Stenberg2017-08-141-2/+2
| | | | to make sure they keep building warning-free
* examples/ftpuploadresume.c: use portable codeDaniel Stenberg2017-08-142-26/+14
| | | | ... converted from the MS specific _snscanf()
* RELEASE-NOTES/THANKS: curl 7.55.1 release timecurl-7_55_1Daniel Stenberg2017-08-132-8/+37
|
* gitignore: ignore .xz now instead of .lzmaDaniel Stenberg2017-08-131-1/+1
|
* cmake: Threads detection update. ref: #1702Sergei Nikulov2017-08-131-20/+9
| | | | Closes #1719
* ipv6_scope: support unique local addressesDaniel Stenberg2017-08-132-3/+6
| | | | | | Fixes #1764 Closes #1773 Reported-by: James Slaughter
* curl/system.h: GCC doesn't define __ppc__ on PowerPC, uses __powerpc__Alex Potapenko2017-08-131-1/+1
| | | | Closes #1774
* test1448: verify redirect to IDN using URLDaniel Stenberg2017-08-132-1/+93
| | | | Closes #1772
* redirect: skip URL encoding for host namesSalah-Eddin Shaban2017-08-131-6/+62
| | | | | | | | This fixes redirects to IDN URLs Fixes #1441 Closes #1762 Reported by: David Lord
* test2032: mark as flaky (again)Daniel Stenberg2017-08-131-0/+1
|
* travis: test cmake build on tarball tooDaniel Stenberg2017-08-121-1/+14
| | | | Could've prevented #1755
* cmake: allow user to override CMAKE_DEBUG_POSTFIXSimon Warta2017-08-121-1/+1
| | | | Closes #1763
* connect-to.d: better languageDaniel Stenberg2017-08-121-2/+2
|
* connect-to.d: clarifiedDaniel Stenberg2017-08-121-9/+12
|
* bagder/Curl_tvdiff_us: fix the mathDaniel Stenberg2017-08-121-1/+1
| | | | | | | | Regression since adef394ac5 (released in 7.55.0) Reported-by: Han Qiao Fixes #1769 Closes #1771
* curl/system.h: add Oracle Solaris StudioDaniel Stenberg2017-08-121-1/+25
| | | | Fixes #1752
* docs: fix typo funtion -> functionAlessandro Ghedini2017-08-121-1/+1
| | | | Closes #1770
* docs: fix grammar in CURL_SSLVERSION_MAX_DEFAULT descriptionAlessandro Ghedini2017-08-122-6/+6
|
* docs: fix typo stuct -> structAlessandro Ghedini2017-08-122-2/+2
|
* test1447: require a curl with http supportDan Fandrich2017-08-121-0/+3
|
* curl/system.h: support more architecturesThomas Petazzoni2017-08-111-2/+3
| | | | | | | | | | | | | | | | | The long list of architectures in include/curl/system.h is annoying to maintain, and needs to be extended for each and every architecture to support. Instead, let's rely on the __SIZEOF_LONG__ define of the gcc compiler (we are in the GNUC condition anyway), which tells us if long is 4 bytes or 8 bytes. This fixes the build of libcurl 7.55.0 on architectures such as OpenRISC or ARC. Closes #1766 Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* test2033: this went flaky againDaniel Stenberg2017-08-111-0/+1
| | | | Suspicion: when we enabled the threaded resolver by default.
* test1447: verifies the parse proxy fix in 6e0e152ce5cDaniel Stenberg2017-08-112-1/+36
|
* parse_proxy(): fix memory leak in case of invalid proxy server nameEven Rouault2017-08-111-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the below leak: $ valgrind --leak-check=full ~/install-curl-git/bin/curl --proxy "http://a:b@/x" http://127.0.0.1 curl: (5) Couldn't resolve proxy name ==5048== ==5048== HEAP SUMMARY: ==5048== in use at exit: 532 bytes in 12 blocks ==5048== total heap usage: 5,288 allocs, 5,276 frees, 445,271 bytes allocated ==5048== ==5048== 2 bytes in 1 blocks are definitely lost in loss record 1 of 12 ==5048== at 0x4C2DB8F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==5048== by 0x4E6CB79: parse_login_details (url.c:5614) ==5048== by 0x4E6BA82: parse_proxy (url.c:5091) ==5048== by 0x4E6C46D: create_conn_helper_init_proxy (url.c:5346) ==5048== by 0x4E6EA18: create_conn (url.c:6498) ==5048== by 0x4E6F9B4: Curl_connect (url.c:6967) ==5048== by 0x4E86D05: multi_runsingle (multi.c:1436) ==5048== by 0x4E88432: curl_multi_perform (multi.c:2160) ==5048== by 0x4E7C515: easy_transfer (easy.c:708) ==5048== by 0x4E7C74A: easy_perform (easy.c:794) ==5048== by 0x4E7C7B1: curl_easy_perform (easy.c:813) ==5048== by 0x414025: operate_do (tool_operate.c:1563) ==5048== ==5048== 2 bytes in 1 blocks are definitely lost in loss record 2 of 12 ==5048== at 0x4C2DB8F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==5048== by 0x4E6CBB6: parse_login_details (url.c:5621) ==5048== by 0x4E6BA82: parse_proxy (url.c:5091) ==5048== by 0x4E6C46D: create_conn_helper_init_proxy (url.c:5346) ==5048== by 0x4E6EA18: create_conn (url.c:6498) ==5048== by 0x4E6F9B4: Curl_connect (url.c:6967) ==5048== by 0x4E86D05: multi_runsingle (multi.c:1436) ==5048== by 0x4E88432: curl_multi_perform (multi.c:2160) ==5048== by 0x4E7C515: easy_transfer (easy.c:708) ==5048== by 0x4E7C74A: easy_perform (easy.c:794) ==5048== by 0x4E7C7B1: curl_easy_perform (easy.c:813) ==5048== by 0x414025: operate_do (tool_operate.c:1563) Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2984 Credit to OSS Fuzz for discovery Closes #1761
* RELEASE-NOTES: synced with 37f2195a9Daniel Stenberg2017-08-111-221/+34
|
* curlver: bump to 7.55.1Daniel Stenberg2017-08-111-3/+3
|
* openssl: fix "error: this statement may fall through"Daniel Stenberg2017-08-111-0/+1
| | | | A gcc7 warning.
* openssl: remove CONST_ASN1_BIT_STRING.David Benjamin2017-08-111-3/+1
| | | | | | Just making the pointer as const works for the pre-1.1.0 path too. Closes #1759
* maketgz: remove old *.dist files before making the tarballDaniel Stenberg2017-08-101-0/+7
| | | | | | | To avoid "old crap" unintentionally getting shipped. Bug: https://curl.haxx.se/mail/lib-2017-08/0050.html Reported-by: Christian Weisgerber
* mkhelp.pl: allow executing this script directlyJay Satiro2017-08-101-1/+1
| | | | | | | | - Enable execute permission (chmod +x) - Change interpreter to /usr/bin/env perl Ref: https://github.com/curl/curl/issues/1743
* configure: use the threaded resolver backend by default if possibleDaniel Stenberg2017-08-102-10/+7
| | | | Closes #1647
* cmake: move cmake_uninstall.cmake to CMake/Daniel Stenberg2017-08-103-4/+4
| | | | Closes #1756
* metalink: fix error: ‘*’ in boolean context, suggest ‘&&’ insteadDaniel Stenberg2017-08-101-1/+1
|
* dist: fix the cmake build by shipping cmake_uninstall.cmake.in tooDaniel Stenberg2017-08-101-1/+1
| | | | Fixes #1755
* travis: verify "make install"Daniel Stenberg2017-08-102-1/+37
| | | | | Help-by: Jay Satiro Closes #1753
* build: check out *.sln files with Windows line endingsMarcel Raad2017-08-101-0/+1
| | | | | | | | Visual Studio doesn't like LF line endings in solution files and always converts them to CRLF when doing changes to the solution. Notably, this affects the solutions in the release archive. Closes https://github.com/curl/curl/pull/1746
* gitignore: ignore top-level .vs folderMarcel Raad2017-08-101-0/+1
| | | | | | | This folder is generated when using the CMake build system from within Visual Studio. Closes https://github.com/curl/curl/pull/1746
* digest_sspi: Don't reuse context if the user/passwd has changedJay Satiro2017-08-102-0/+45
| | | | | | | | | Bug: https://github.com/curl/curl/issues/1685 Reported-by: paulharris@users.noreply.github.com Assisted-by: Isaac Boukris Closes https://github.com/curl/curl/pull/1742
* dist: Add dictserver.py/negtelnetserver.py to EXTRA_DISTAdam Sampson2017-08-091-1/+2
| | | | | | | These weren't included in the 7.55.0 release, but are required in order to run the full test suite. Closes #1744
* curl: do bounds check using a double comparisonAdam Sampson2017-08-091-1/+1
| | | | | | | | | | | | | The fix for this in 8661a0aacc01492e0436275ff36a21734f2541bb wasn't complete: if the parsed number in num is larger than will fit in a long, the conversion is undefined behaviour (causing test1427 to fail for me on IA32 with GCC 7.1, although it passes on AMD64 and ARMv7). Getting rid of the cast means the comparison will be done using doubles. It might make more sense for the max argument to also be a double... Fixes #1750 Closes #1749
* make install: add 8 missing man pages to the installationDaniel Stenberg2017-08-092-1/+8
|
* build: fix 'make install' with configure, install docs/libcurl/* tooDaniel Stenberg2017-08-091-0/+2
| | | | | | Broken since d24838d4da9faa Reported-by: Bernard Spil
* RELEASE-NOTES: curl 7.55.0curl-7_55_0Daniel Stenberg2017-08-091-9/+24
|
* THANKS: 20 new contributors in 7.55.0Daniel Stenberg2017-08-092-0/+21
|
* docs/comments: Update to secure URL versionsViktor Szakats2017-08-0816-21/+21
| | | | Closes #1741
* configure: fix recv/send/select detection on AndroidDaniel Stenberg2017-08-081-6/+20
| | | | | | | | | | | ... since they now provide several functions as __attribute__((overloadable)), the argument detection logic need updates. Patched-by: destman at github Fixes #1738 Closes #1739
* ax_code_coverage.m4: update to latest versionMarcel Raad2017-08-081-69/+114
| | | | | | | This updates the script to aad5ad5fedb306b39f901a899b7bd305b66c418d from August 01, 2017. Notably, this removes the lconv version whitelist. Closes https://github.com/curl/curl/pull/1716
* test1427: verify command line parser integer overflow detectionDaniel Stenberg2017-08-072-1/+30
|
* curl: detect and bail out early on parameter integer overflowsDaniel Stenberg2017-08-075-14/+36
| | | | | | | | | Make the number parser aware of the maximum limit curl accepts for a value and return an error immediately if larger, instead of running an integer overflow later. Fixes #1730 Closes #1736
* glob: do not continue parsing after a strtoul() overflow rangeDaniel Stenberg2017-08-073-2/+40
| | | | | | | | | Added test 1289 to verify. CVE-2017-1000101 Bug: https://curl.haxx.se/docs/adv_20170809A.html Reported-by: Brian Carpenter