Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-08-03 | TLS: only reuse connections with the same client cert | Daniel Stenberg | |
CVE-2016-5420 Bug: https://curl.haxx.se/docs/adv_20160803B.html | |||
2016-08-03 | TLS: switch off SSL session id when client cert is used | Daniel Stenberg | |
CVE-2016-5419 Bug: https://curl.haxx.se/docs/adv_20160803A.html Reported-by: Bru Rom Contributions-by: Eric Rescorla and Ray Satiro | |||
2016-08-03 | curl_multi_cleanup: clear connection pointer for easy handles | Daniel Stenberg | |
CVE-2016-5421 Bug: https://curl.haxx.se/docs/adv_20160803C.html Reported-by: Marcelo Echeverria and Fernando Muñoz | |||
2016-08-03 | KNOWN_BUGS: SOCKS proxy not working via IPv6 | Daniel Stenberg | |
Closes #835 | |||
2016-08-03 | KNOWN_BUGS: CURLOPT_SEEKFUNCTION not called with CURLFORM_STREAM | Daniel Stenberg | |
Closes #768 | |||
2016-08-03 | KNOWN_BUGS: transfer-encoding: chunked in HTTP/2 | Daniel Stenberg | |
Closes #662 | |||
2016-08-03 | TODO: Provide cmake config-file | Daniel Stenberg | |
Closes #885 | |||
2016-08-02 | os400: define BUILDING_LIBCURL in make script. | Patrick Monnerat | |
2016-08-01 | RELEASE-NOTES: synced with aa9f536a18b | Daniel Stenberg | |
2016-08-01 | mbedtls: Fix debug function name | Thomas Glanzmann | |
This patch is necessary so that curl compiles if MBEDTLS_DEBUG is defined. Bug: https://curl.haxx.se/mail/lib-2016-08/0001.html | |||
2016-08-01 | travis: fix OSX build by re-installing libtool | Sergei Nikulov | |
Apparently due to a broken homebrew install fixes #934 Closes #939 | |||
2016-08-01 | win32: fix a potential memory leak in Curl_load_library | Martin Vejnár | |
If a call to GetSystemDirectory fails, the `path` pointer that was previously allocated would be leaked. This makes sure that `path` is always freed. Closes #938 | |||
2016-07-31 | include: revert 9adf3c4 and make public types void * again | Daniel Stenberg | |
Many applications assume the actual contents of the public types and use that do for example forward declarations (saving them from including our public header) which then breaks when we switch from void * to a struct *. I'm not convinced we were wrong, but since this practise seems widespread enough I'm willing to (partly) step down. Now libcurl uses the struct itself when it is built and it allows applications to use the struct type if CURL_STRICTER is defined at the time of the #include. Reported-by: Peter Frühberger Fixes #926 | |||
2016-07-28 | cmake: Fix for schannel support | Yonggang Luo | |
The check_library_exists_concat do not check crypt32 library properly. So include it directly. Bug: https://github.com/curl/curl/pull/917 Reported-by: Yonggang Luo Bug: https://github.com/curl/curl/issues/935 Reported-by: Alain Danteny | |||
2016-07-28 | Revert "travis: Install libtool for OS X builds" | Jay Satiro | |
Didn't work. This reverts commit 50723585ed380744358de054e2a55dccee65dfd7. | |||
2016-07-28 | travis: Install libtool for OS X builds | Jay Satiro | |
CI is failing due to missing libtoolize, so I'm trying this. | |||
2016-07-26 | TODO: minor typo in last commit | Viktor Szakats | |
merged #931 | |||
2016-07-26 | TODO: Timeout idle connections from the pool | Daniel Stenberg | |
2016-07-25 | os400: minimum supported OS version: V6R1M0. | Patrick Monnerat | |
Do not log compilation informational messages. | |||
2016-07-24 | tests: Fix for http/2 feature | Jay Satiro | |
Bug: https://curl.haxx.se/mail/lib-2016-07/0070.html Reported-by: Paul Howarth | |||
2016-07-23 | README: Mention wolfSSL in the 'Dependencies' section | Steve Holme | |
2016-07-23 | vauth.h: No need to query HAVE_GSSAPI || USE_WINDOWS_SSPI for SPNEGO | Steve Holme | |
As SPNEGO is only defined when these pre-processor variables are defined there is no need to query them explicitly. | |||
2016-07-23 | spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration | Steve Holme | |
Typo introduced in commit ad5e9bfd5d. | |||
2016-07-22 | SECURITY: mention how to get windows-specific CVEs | Daniel Stenberg | |
... and make the distros link a proper link | |||
2016-07-21 | test558: fix test by stripping file paths from FD lines | Dan Fandrich | |
2016-07-21 | tests: distribute the http2-server.pl script, too | Kamil Dudka | |
2016-07-21 | docs: distribute the CURLINFO_HTTP_VERSION(3) man page, too | Kamil Dudka | |
2016-07-21 | bump: start working on 7.50.1 | Daniel Stenberg | |
2016-07-21 | RELEASE-NOTES: version 7.50.0 ready | Daniel Stenberg | |
2016-07-21 | THANKS: 13 new contributors from the 7.50.0 release | Daniel Stenberg | |
2016-07-21 | winbuild: fix embedded manifest option | Jay Satiro | |
Embedded manifest option didn't work due to typo. Reported-by: Stefan Kanthak | |||
2016-07-20 | vauth: Fix memleak by freeing credentials if out of memory | Jay Satiro | |
This is a follow up to the parent commit dcdd4be which fixes one leak but creates another by failing to free the credentials handle if out of memory. Also there's a second location a few lines down where we fail to do same. This commit fixes both of those issues. | |||
2016-07-20 | vauth: Fixed memory leak due to function returning without free | Saurav Babu | |
This patch allocates memory to "output_token" only when it is required so that memory is not leaked if function returns. | |||
2016-07-20 | test558: updated after ipv6-check move | Daniel Stenberg | |
Follow-up commit to c50980807c5 to make this test pass. | |||
2016-07-20 | connect: disable TFO on Linux when using SSL | Jay Satiro | |
- Linux TFO + TLS is not implemented yet. Bug: https://github.com/curl/curl/issues/907 | |||
2016-07-19 | ROADMAP: QUIC and TLS 1.3 | Daniel Stenberg | |
2016-07-19 | RELEASE-NOTES: synced with c50980807c5 | Daniel Stenberg | |
2016-07-18 | curl_global_init: Check if IPv6 works | Brian Prodoehl | |
- Curl_ipv6works() is not thread-safe until after the first call, so call it once during global init to avoid a possible race condition. Bug: https://github.com/curl/curl/issues/915 PR: https://github.com/curl/curl/pull/918 | |||
2016-07-14 | CURLMOPT_SOCKETFUNCTION.3: fix typo | Timothy Polich | |
Closes https://github.com/curl/curl/pull/914 | |||
2016-07-14 | library: Fix memory leaks found during static analysis | Miroslav Franc | |
Closes https://github.com/curl/curl/pull/913 | |||
2016-07-13 | cookie.c: Fix misleading indentation | Viktor Szakats | |
Closes https://github.com/curl/curl/pull/911 | |||
2016-07-09 | FAQ: Update FTP directory listing section for MLSD command | Jay Satiro | |
Explain how some FTP servers support the machine readable listing format MLSD from RFC 3659 and compare it to LIST. Ref: https://github.com/curl/curl/issues/906 | |||
2016-07-01 | Appveyor: Updates for options - CURL_STATICLIB/BUILD_TESTING | Sergei Nikulov | |
Closes #892 | |||
2016-06-30 | TODO: 17.4 also brings more HTTP/2 support | Daniel Stenberg | |
2016-06-30 | TODO: try next proxy if one doesn't work | Daniel Stenberg | |
Closes #896 | |||
2016-06-29 | conn: don't free easy handle data in handler->disconnect | Daniel Stenberg | |
Reported-by: Gou Lingfeng Bug: https://curl.haxx.se/mail/lib-2016-06/0139.html | |||
2016-06-29 | test1244: test different proxy ports same URL | Daniel Stenberg | |
2016-06-29 | curl_global_init.3: improved formatting of the flags | Daniel Stenberg | |
2016-06-29 | curl_global_init.3: expand on the SSL and WIN32 bits purpose | Daniel Stenberg | |
Reported-by: Richard Gray Bug: https://curl.haxx.se/mail/lib-2016-06/0136.html | |||
2016-06-28 | cleanup: minor code cleanup in Curl_http_readwrite_headers() | Michael Kaufmann | |
- the expression of an 'if' was always true - a 'while' contained a condition that was always true - use 'if(k->exp100 > EXP100_SEND_DATA)' instead of 'if(k->exp100)' - fixed a typo Closes #889 |