aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-02-19curl_sasl: Fix memory leak in digest parserEmil Lerner
If any parameter in a HTTP DIGEST challenge message is present multiple times, memory allocated for all but the last entry should be freed. Bug: https://github.com/curl/curl/pull/667
2016-02-19Added test 1437 to verify a memory leakDan Fandrich
Reported-by: neex@users.noreply.github.com
2016-02-18CURLOPT_COOKIEFILE.3: HTTP headers must be Set-Cookie styleJay Satiro
Bug: https://github.com/curl/curl/issues/666 Reported-by: baumanj@users.noreply.github.com
2016-02-18curl.1: HTTP headers for --cookie must be Set-Cookie styleJay Satiro
Bug: https://github.com/curl/curl/issues/666 Reported-by: baumanj@users.noreply.github.com
2016-02-18curl.1: add a missing dashDaniel Stenberg
2016-02-18CONTRIBUTING.md: fix linksDaniel Stenberg
2016-02-18ISSUE_TEMPLATE: github issue templateDaniel Stenberg
First version, try this out!
2016-02-18CONTRIBUTING.md: move into .githubDaniel Stenberg
To hide github specific files somewhat from the rest.
2016-02-18opts: add referencesDaniel Stenberg
2016-02-17examples/make: add 'checksrc' targetDaniel Stenberg
2016-02-1710-at-a-time: typecast the argument passed to sleep()Daniel Stenberg
2016-02-17externalsocket.c: fix compiler warning for fwrite return typeDaniel Stenberg
2016-02-17anyauthput.c: fix compiler warningsDaniel Stenberg
2016-02-17simplessl.c: warning: while with spaceDaniel Stenberg
2016-02-17curlx.c: i2s_ASN1_IA5STRING() clashes with an openssl functionDaniel Stenberg
Reported-By: Gisle Vanem
2016-02-17http2: don't decompress gzip decoding automaticallyDaniel Stenberg
At one point during the development of HTTP/2, the commit 133cdd29ea0 introduced automatic decompression of Content-Encoding as that was what the spec said then. Now however, HTTP/2 should work the same way as HTTP/1 in this regard. Reported-by: Kazuho Oku Closes #661
2016-02-16http: Don't break the header into chunks if HTTP/2Tatsuhiro Tsujikawa
nghttp2 callback deals with TLS layer and therefore the header does not need to be broken into chunks. Bug: https://github.com/curl/curl/issues/659 Reported-by: Kazuho Oku
2016-02-16openssl: use macro to guard the opaque EVP_PKEY branchViktor Szakats
2016-02-16openssl: avoid direct PKEY access with OpenSSL 1.1.0Viktor Szakats
by using API instead of accessing an internal structure. This is required starting OpenSSL 1.1.0-pre3. Closes #650
2016-02-15RELEASE-NOTES: synced with ede0bfc079daDaniel Stenberg
2016-02-14CURLOPT_CONNECTTIMEOUT_MS.3: Fix example to use milliseconds optionClint Clayton
Change the example in the docs for CURLOPT_CONNECTTIMEOUT_MS to use CURLOPT_CONNECTTIMEOUT_MS instead of CURLOPT_CONNECTTIMEOUT. Closes #653
2016-02-14opt-docs: add more referencesDaniel Stenberg
2016-02-14SCP: use libssh2_scp_recv2 to support > 2GB files on windowsDavid Byron
libssh2_scp_recv2 is introduced in libssh2 1.7.0 - to be released "any day now. Closes #451
2016-02-13gtls: fix for builds lacking encrypted key file supportShine Fan
Bug: https://github.com/curl/curl/pull/651
2016-02-13test1604: Add to Makefile.inc so it gets runDan Fandrich
2016-02-12generate.bat: Fix comment bug by removing old commentsJay Satiro
Remove NOTES section, it's no longer needed since we aren't setting the errorlevel and more importantly the recently updated URL in the comments is causing some unusual behavior that breaks the script. Closes https://github.com/curl/curl/issues/649
2016-02-12curl.1: --disable-{eprt,epsv} are ignored for IPv6 hostsKamil Dudka
The behavior has been clarified in CURLOPT_FTP_USE_{EPRT,EPSV}.3 man pages since curl-7_12_3~131. This patch makes it clear in the curl.1 man page, too. Bug: https://bugzilla.redhat.com/1305970
2016-02-12dist: ship buildconf.bat tooDaniel Stenberg
As the winbuild/* stuff uses it!
2016-02-12curlx_tvdiff: handle 32bit time_t overflowsDaniel Stenberg
On 32bit systems, make sure we don't overflow and return funky values for very large time differences. Reported-by: Anders Bakken Closes #646
2016-02-11examples: fix some compiler warningsDaniel Stenberg
2016-02-11simplessl.c: fix my breakageDaniel Stenberg
2016-02-11examples: adhere to curl code styleDaniel Stenberg
All plain C examples now (mostly) adhere to the curl code style. While they are only examples, they had diverted so much and contained all sorts of different mixed code styles by now. Having them use a unified style helps users and readability. Also, as they get copy-and-pasted widely by users, making sure they're clean and nice is a good idea. 573 checksrc warnings were addressed.
2016-02-11examples/cookie_interface.c: add cleanup callDaniel Stenberg
cleaning up handles is a good idea as we leak memory otherwise Also, line wrapped before 80 columns.
2016-02-10nss: search slash in forward direction in dup_nickname()Kamil Dudka
It is wasteful to search it backwards if we look for _any_ slash.
2016-02-10nss: do not count enabled cipher-suitesKamil Dudka
We only care if at least one cipher-suite is enabled, so it does not make any sense to iterate till the end and count all enabled cipher-suites.
2016-02-10contributors.sh: make 79 the max column width (from 80)Daniel Stenberg
2016-02-10RELEASE-NOTES: synced with c276aefee3995Daniel Stenberg
2016-02-10mbedtls.c: re-indent to better match curl standardsDaniel Stenberg
2016-02-09mbedtls: fix memory leak when destroying SSL connection dataRafael Antonio
Closes #626
2016-02-09mbedtls: fix ALPN usage segfaultDaniel Stenberg
Since we didn't keep the input argument around after having called mbedtls, it could end up accessing the wrong memory when figuring out the ALPN protocols. Closes #642
2016-02-09opts: update references to renamed optionsTimotej Lazar
2016-02-09KNOWN_BUGS: Update #92 - Windows device prefixJay Satiro
2016-02-09tool_doswin: Support for literal path prefix \\?\Jay Satiro
For example something like --output \\?\C:\foo
2016-02-09configure: state "BoringSSL" in summary when that was detectedDaniel Stenberg
2016-02-09openssl: remove most BoringSSL #ifdefs.David Benjamin
As of https://boringssl-review.googlesource.com/#/c/6980/, almost all of BoringSSL #ifdefs in cURL should be unnecessary: - BoringSSL provides no-op stubs for compatibility which replaces most #ifdefs. - DES_set_odd_parity has been in BoringSSL for nearly a year now. Remove the compatibility codepath. - With a small tweak to an extend_key_56_to_64 call, the NTLM code builds fine. - Switch OCSP-related #ifdefs to the more generally useful OPENSSL_NO_OCSP. The only #ifdefs which remain are Curl_ossl_version and the #undefs to work around OpenSSL and wincrypt.h name conflicts. (BoringSSL leaves that to the consumer. The in-header workaround makes things sensitive to include order.) This change errs on the side of removing conditionals despite many of the restored codepaths being no-ops. (BoringSSL generally adds no-op compatibility stubs when possible. OPENSSL_VERSION_NUMBER #ifdefs are bad enough!) Closes #640
2016-02-08KNOWN_BUGS: Windows device prefix is required for devicesJay Satiro
2016-02-08tool_urlglob: Allow reserved dos device names (Windows)Jay Satiro
Allow --output to reserved dos device names without the device prefix for backwards compatibility. Example: --output NUL can be used instead of --output \\.\NUL Bug: https://github.com/curl/curl/commit/4520534#commitcomment-15954863 Reported-by: Gisle Vanem
2016-02-08cookies: allow spaces in cookie names, cut of trailing spacesDaniel Stenberg
It turns out Firefox and Chrome both allow spaces in cookie names and there are sites out there using that. Turned out the code meant to strip off trailing space from cookie names didn't work. Fixed now. Test case 8 modified to verify both these changes. Closes #639
2016-02-08Merge branch 'master' of github.com:curl/curlPatrick Monnerat
2016-02-08os400: sync ILE/RPG definitions with latest public header files.Patrick Monnerat