summaryrefslogtreecommitdiff
path: root/RELEASE-NOTES
blob: e65110c09cb34c663913fe24c579f5dc93e7a1da (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
curl and libcurl 7.71.0

 Public curl releases:         192
 Command line options:         232
 curl_easy_setopt() options:   277
 Public functions in libcurl:  82
 Contributors:                 2192

This release includes the following changes:

 o CURLOPT_SSL_OPTIONS: optional use of Windows' CA store (with openssl) [10]
 o setopt: add CURLOPT_PROXY_ISSUERCERT(_BLOB) for coherency [31]
 o setopt: support certificate options in memory with struct curl_blob [41]
 o tool: Add option --retry-all-errors to retry on any error [27]

This release includes the following bugfixes:

 o *_sspi: fix bad uses of CURLE_NOT_BUILT_IN [21]
 o all: fix codespell errors [75]
 o altsvc: fix 'dsthost' may be used uninitialized in this function
 o altsvc: fix parser for lines ending with CRLF [74]
 o appveyor: add non-debug plain autotools-based build [90]
 o appveyor: disable flaky test 1501 and ignore broken 1056
 o appveyor: disable test 1139 instead of ignoring it
 o asyn-*: remove support for never-used NULL entry pointers [19]
 o azure: use matrix strategy to avoid configuration redundancy [83]
 o build: disable more code/data when built without proxy support [84]
 o checksrc: enhance the ASTERISKSPACE and update code accordingly [52]
 o CI/macos: fix 'is already installed' errors by using bundle [94]
 o cirrus: disable SFTP and SCP tests [7]
 o CMake: add ENABLE_ALT_SVC option
 o CMake: add HTTP/3 support (ngtcp2+nghttp3, quiche) [34]
 o CMake: add libssh build support [37]
 o CMake: do not build test programs by default [30]
 o CMake: fix runtests.pl with CMake, add new test targets [29]
 o CMake: rebuild Makefile.inc.cmake when Makefile.inc changes [58]
 o configure: fix pthread check with static boringssl
 o configure: only strip first -L from LDFLAGS [89]
 o configure: repair the check if argv can be written to [47]
 o configure: the wolfssh backend does not provide SCP [57]
 o connect: make happy eyeballs work for QUIC (again) [16]
 o curl.1: Quote globbed URLs [51]
 o curl: remove -J "informational" written on stdout [36]
 o CURLINFO_ACTIVESOCKET.3: clarify the description [87]
 o doc: add missing closing parenthesis in CURLINFO_SSL_VERIFYRESULT.3 [5]
 o doc: Rename VERSIONS to VERSIONS.md as it already has Markdown syntax [20]
 o docs/HTTP3: add qlog to the quiche build instruction
 o docs/options-in-versions: which version added each cmdline option [53]
 o docs: unify protocol lists [54]
 o dynbuf: introduce internal generic dynamic buffer functions [17]
 o easy: fix dangling pointer on easy_perform fail [26]
 o examples/ephiperfifo: turn off interval when setting timerfd [79]
 o examples/http2-down/upload: add error checks [78]
 o examples: remove asiohiper.cpp [4]
 o FILEFORMAT: add more features that tests can depend on
 o ftp: make domore_getsock() return the secondary socket properly
 o ftp: mark return-ignoring calls to Curl_GetFTPResponse with (void) [64]
 o ftp: shut down the secondary connection properly when SSL is used [43]
 o GnuTLS: Backend support for CURLINFO_SSL_VERIFYRESULT [9]
 o hostip: make Curl_printable_address not return anything [63]
 o hostip: on macOS avoid DoH when given a numerical IP address [69]
 o http2: keep trying to send pending frames after req.upload_done [40]
 o http2: simplify and clean up trailer handling [6]
 o HTTP3.md: clarify cargo build directory [77]
 o libcurl.pc: Merge Libs.private into Libs for static-only builds [28]
 o libssh2: improved error output for wrong quote syntax [39]
 o libssh2: set the expected total size in SCP upload init [2]
 o libtest/cmake: Remove commented code [13]
 o list-only.d: this option existed already in 4.0
 o ngtcp2: cleanup memory when failing to connect [70]
 o ngtcp2: fix build with current ngtcp2 master implementing draft 28 [76]
 o ngtcp2: introduce qlog support [23]
 o OpenSSL: have CURLOPT_CRLFILE imply CURLSSLOPT_NO_PARTIALCHAIN [55]
 o projects: Add crypt32.lib to dependencies for all OpenSSL configs [93]
 o quiche: advertise draft 28 support [91]
 o quiche: clean up memory properly when failing to connect [71]
 o quiche: enable qlog output [14]
 o Revert "buildconf: use find -execdir" [38]
 o Revert "ssh: ignore timeouts during disconnect" [67]
 o runtests: remove sleep calls [18]
 o runtests: show elapsed test time with higher precision (ms)
 o select: always use Sleep in Curl_wait_ms on Win32 [82]
 o select: fix overflow protection in Curl_socket_check [22]
 o sendf: make failf() use the mvsnprintf() return code [62]
 o server/sws: fix asan warning on use of uninitialized variable
 o sha256: fixed potentially uninitialized variable [61]
 o sockfilt: make select_ws stop waiting on exit signal event
 o socks: fix expected length of SOCKS5 reply [68]
 o source cleanup: remove all custom typedef structs [42]
 o test1167: fixes in badsymbols.pl [73]
 o test1177: look for curl.h in source directory [1]
 o test1238: avoid tftpd being busy for tests shortly following [33]
 o test613.pl: make tests 613 and 614 work with OpenSSH for Windows [8]
 o test75: Remove precheck test
 o tests: add https-proxy support to the test suite [49]
 o tests: add support for SSH server variant specific transfer paths [24]
 o tests: make test 1248 + 1249 use %NOLISTENPORT [3]
 o tests: pick a random port number for SSH [12]
 o tests: run stunnel for HTTPS and FTPS on dynamic ports [11]
 o timeouts: change millisecond timeouts to timediff_t from time_t [86]
 o tool: fixup a few --help descriptions [56]
 o tool: support UTF-16 command line on Windows [46]
 o tool_operate: fixed potentially uninitialized variables [60]
 o tool_paramhlp: fixed potentially uninitialized strtol() variable [59]
 o trailers: switch h1-trailer logic to use dynbuf [81]
 o transfer: close connection after excess data has been read [66]
 o travis: add "qlog" as feature in the quiche build
 o travis: Add ngtcp2 and quiche tests for CMake
 o travis: upgrade to bionic, clang-9, improve readability [35]
 o typecheck-gcc.h: CURLINFO_PRIVATE does not need a 'char *' [44]
 o unit1604.c: fix implicit conv from 'SANITIZEcode' to 'CURLcode' [88]
 o url: accept "any length" credentials for proxy auth [72]
 o url: alloc the download buffer at transfer start [85]
 o url: make the updated credentials URL-encoded in the URL [48]
 o url: reject too long input when parsing credentials [25]
 o url: sort the protocol schemes in rough popularity order [32]
 o urlapi: accept :: as a valid IPv6 address [15]
 o urldata: leave the HTTP method untouched in the set.* struct [45]
 o user-agent.d: spell out what happens given a blank argument [80]
 o vauth/cleartext: fix theoretical integer overflow [50]
 o vtls: Extract and simplify key log file handling from OpenSSL
 o wolfssl: add SSLKEYLOGFILE support [65]
 o write-out.d: added "response_code"

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Adnan Khan, Billyzou0741326 on github, Brian Carpenter, Cherish98 on github,
  Dan Fandrich, Daniel Stenberg, Emil Engler, Estanislau Augé-Pujadas,
  Gilles Vollant, Gregory Jefferis, huzunhao on github, James Le Cuirot,
  Jeroen Ooms, John Simpson, Kamil Dudka, Kane York, Lucas Pardue,
  Maksim Stsepanenka, Marcel Raad, Marc Hörsken, Max Peal, Michael Kaufmann,
  Mohamed Osama, Murugan Balraj, Neal Poole, Pavel Volgarev, Peter Wang,
  Peter Wu, Radoslav Georgiev, Ray Satiro, Rikard Falkeborn, rl1987 on github,
  Saleem Abdulrasool, Samuel Marks, Siva Sivaraman, therealhirudo on github,
  Thomas Bouzerar, Viktor Szakats, Vyron Tsingaras, Werner Stolz, Will Roberts,
  Коваленко Анатолий Викторович, kotoriのねこ
  (43 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.haxx.se/bug/?i=5310
 [2] = https://curl.haxx.se/mail/archive-2020-05/0000.html
 [3] = https://curl.haxx.se/bug/?i=5318
 [4] = https://curl.haxx.se/bug/?i=5090
 [5] = https://curl.haxx.se/bug/?i=5320
 [6] = https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22030
 [7] = https://curl.haxx.se/bug/?i=5315
 [8] = https://curl.haxx.se/bug/?i=5328
 [9] = https://curl.haxx.se/bug/?i=5287
 [10] = https://curl.haxx.se/bug/?i=4346
 [11] = https://curl.haxx.se/bug/?i=5267
 [12] = https://curl.haxx.se/bug/?i=5273
 [13] = https://curl.haxx.se/bug/?i=5311
 [14] = https://curl.haxx.se/bug/?i=5341
 [15] = https://curl.haxx.se/bug/?i=5344
 [16] = https://curl.haxx.se/bug/?i=5334
 [17] = https://curl.haxx.se/bug/?i=5300
 [18] = https://curl.haxx.se/bug/?i=5323
 [19] = https://curl.haxx.se/bug/?i=5324
 [20] = https://curl.haxx.se/bug/?i=5325
 [21] = https://curl.haxx.se/bug/?i=5355
 [22] = https://curl.haxx.se/bug/?i=5286
 [23] = https://curl.haxx.se/bug/?i=5353
 [24] = https://curl.haxx.se/bug/?i=5298
 [25] = https://curl.haxx.se/bug/?i=5383
 [26] = https://curl.haxx.se/bug/?i=5363
 [27] = https://curl.haxx.se/bug/?i=5185
 [28] = https://curl.haxx.se/bug/?i=5373
 [29] = https://curl.haxx.se/bug/?i=5358
 [30] = https://curl.haxx.se/bug/?i=5368
 [31] = https://curl.haxx.se/bug/?i=5431
 [32] = https://curl.haxx.se/bug/?i=5377
 [33] = https://curl.haxx.se/bug/?i=5364
 [34] = https://curl.haxx.se/bug/?i=5359
 [35] = https://curl.haxx.se/bug/?i=5370
 [36] = https://curl.haxx.se/mail/archive-2020-05/0044.html
 [37] = https://curl.haxx.se/bug/?i=5372
 [38] = https://curl.haxx.se/bug/?i=5483
 [39] = https://curl.haxx.se/bug/?i=5474
 [40] = https://curl.haxx.se/bug/?i=1410
 [41] = https://curl.haxx.se/bug/?i=5357
 [42] = https://curl.haxx.se/bug/?i=5338
 [43] = https://curl.haxx.se/bug/?i=5340
 [44] = https://curl.haxx.se/bug/?i=5432
 [45] = https://curl.haxx.se/bug/?i=5499
 [46] = https://curl.haxx.se/bug/?i=3784
 [47] = https://curl.haxx.se/bug/?i=5470
 [48] = https://github.com/jeroen/curl/issues/224
 [49] = https://curl.haxx.se/bug/?i=5399
 [50] = https://curl.haxx.se/bug/?i=5391
 [51] = https://github.com/curl/curl/issues/5388
 [52] = https://curl.haxx.se/bug/?i=5386
 [53] = https://curl.haxx.se/bug/?i=5381
 [54] = https://curl.haxx.se/bug/?i=5384
 [55] = https://curl.haxx.se/bug/?i=5374
 [56] = https://curl.haxx.se/bug/?i=5379
 [57] = https://curl.haxx.se/bug/?i=5387
 [58] = https://curl.haxx.se/bug/?i=5469
 [59] = https://curl.haxx.se/bug/?i=5417
 [60] = https://curl.haxx.se/bug/?i=5416
 [61] = https://curl.haxx.se/bug/?i=5414
 [62] = https://curl.haxx.se/bug/?i=5413
 [63] = https://curl.haxx.se/bug/?i=5411
 [64] = https://curl.haxx.se/bug/?i=5412
 [65] = https://curl.haxx.se/bug/?i=5327
 [66] = https://curl.haxx.se/bug/?i=5440
 [67] = https://curl.haxx.se/mail/lib-2020-05/0068.html
 [68] = https://curl.haxx.se/bug/?i=5527
 [69] = https://curl.haxx.se/bug/?i=5454
 [70] = https://curl.haxx.se/bug/?i=5447
 [71] = https://curl.haxx.se/bug/?i=5450
 [72] = https://curl.haxx.se/bug/?i=5448
 [73] = https://curl.haxx.se/bug/?i=5442
 [74] = https://curl.haxx.se/bug/?i=5445
 [75] = https://curl.haxx.se/bug/?i=5452
 [76] = https://curl.haxx.se/bug/?i=5444
 [77] = https://curl.haxx.se/bug/?i=5522
 [78] = https://curl.haxx.se/bug/?i=5463
 [79] = https://curl.haxx.se/bug/?i=5485
 [80] = https://curl.haxx.se/bug/?i=5525
 [81] = https://curl.haxx.se/bug/?i=5524
 [82] = https://curl.haxx.se/bug/?i=5489
 [83] = https://curl.haxx.se/bug/?i=5468
 [84] = https://curl.haxx.se/bug/?i=5466
 [85] = https://curl.haxx.se/bug/?i=5472
 [86] = https://curl.haxx.se/bug/?i=5479
 [87] = https://curl.haxx.se/bug/?i=5299
 [88] = https://curl.haxx.se/bug/?i=5476
 [89] = https://curl.haxx.se/bug/?i=5519
 [90] = https://curl.haxx.se/bug/?i=5477
 [91] = https://curl.haxx.se/bug/?i=5518
 [93] = https://curl.haxx.se/bug/?i=5516
 [94] = https://curl.haxx.se/bug/?i=5513