aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-05-23openssl: Fix uninitialized variable use in NPN callbackTatsuhiro Tsujikawa
OpenSSL passes out and outlen variable uninitialized to select_next_proto_cb callback function. If the callback function returns SSL_TLSEXT_ERR_OK, the caller assumes the callback filled values in out and outlen and processes as such. Previously, if there is no overlap in protocol lists, curl code does not fill any values in these variables and returns SSL_TLSEXT_ERR_OK, which means we are triggering undefined behavior. valgrind warns this. This patch fixes this issue by fallback to HTTP/1.1 if there is no overlap.
2014-05-23curl.1: clarify that -u can't specify a user with colonDaniel Stenberg
2014-05-22README: Added Test Suite to the TODO listSteve Holme
2014-05-22build: Use CURLX_* file lists for Visual Studio curl tool project generationSteve Holme
2014-05-22tool_getparam.c: Fixed compilation warningsSteve Holme
There is an implicit conversion from "unsigned long" to "long"
2014-05-22RELEASE-NOTES: Synced with f634355868Steve Holme
2014-05-22http: Fix a compiler warning when http2 support is disabledDan Fandrich
2014-05-22build: Fixed incorrect reference to curl_setup.h in Visual Studio filesSteve Holme
Fixed a copy / paste error from my 2011 project files.
2014-05-21darwinssl: fix lint & build warnings in the previous commitNick Zitzmann
2014-05-21Add support for --cacert in DarwinSSL.Vilmos Nebehaj
Security Framework on OS X makes it possible to supply extra anchor (CA) certificates via the Certificate, Key, and Trust Services API. This commit makes the '--cacert' option work using this API. More information: https://developer.apple.com/library/mac/documentation/security/Reference/certifkeytrustservices/Reference/reference.html The HTTPS tests now pass on OS X except 314, which requires the '--crl' option to work.
2014-05-22http.c: Fixed compilation warningSteve Holme
warning: suggest braces around empty body in an 'else' statement
2014-05-22bits.close: Fixed compilation warningSteve Holme
warning: implicit declaration of function 'connclose'
2014-05-22bits.close: introduce connection close trackingDaniel Stenberg
Make all code use connclose() and connkeep() when changing the "close state" for a connection. These two macros take a string argument with an explanation, and debug builds of curl will include that in the debug output. Helps tracking connection re-use/close issues.
2014-05-21Makefile.inc: Added curlx headers to assist Visual Studio project generationSteve Holme
2014-05-21build: Renamed CURLX_ONES file list definition to CURLX_CFILESSteve Holme
Renamed the CURLX_ONES file list definition in order to a) try and be consistent with other file lists and b) to allow for the addition of the curlx header files, which will assist with Visual Studio project files generation rather than hard coding those files.
2014-05-21bump: Start working on the next releaseSteve Holme
2014-05-20THANKS: 18 new contributors for 7.37.0Daniel Stenberg
2014-05-20RELEASE-NOTES: synced with 85f4075bdbf3Daniel Stenberg
Possibly the final update before release...
2014-05-20README: Added some outstanding tasks to the TODO listSteve Holme
Added a couple of outstanding tasks to the TODO section that we didn't get time to do before the release.
2014-05-20http2: make connection re-use workDaniel Stenberg
Http2 connections would wrongly get closed after each individual request. Co-authored-by: Tatsuhiro Tsujikawa Bug: http://curl.haxx.se/bug/view.cgi?id=1374
2014-05-20ALPN: fix typo in http/1.1 identifierFabian Frank
According to https://tools.ietf.org/html/draft-ietf-tls-applayerprotoneg-05 it is "http/1.1" and not "http/1.0".
2014-05-20build-openssl.bat: Added check for OpenSSL source directorySteve Holme
2014-05-20build-openssl.bat: Added default source directory when not specifiedSteve Holme
Added a default source directory so the user doesn't have to specify one - the same as that, which the Visual Studio project files expect the OpenSSL dependencies to be in.
2014-05-19Makefile.am: Fixed missing / in VC10+ project file generationSteve Holme
2014-05-19INSTALL: Updated MSVC 6 caveatsSteve Holme
To use an up to date download link as well as remove duplicate information.
2014-05-19INSTALL: Updated for new Visual Studio project filesSteve Holme
2014-05-18build: Slight rename of new LIB_* makefile file variablesSteve Holme
In order to try and be consistent between curl and libcurl renamed the recently introduced LIB_* makefile file variables.
2014-05-18build: Removed old Visual Studio project filesSteve Holme
2014-05-18maketgz: two more CRLFDaniel Stenberg
grrr, missed them in my previous fix
2014-05-18test1014: GSS-API is only in curl-config. not in curlDaniel Stenberg
Follow-up to commit 121bcfee5d1. curl-config --features now lists GSS-API but it is not a listed feature in curl -V. This should probably be synchronized.
2014-05-18test1134: verify CREDSPERREQUEST for HTTPDaniel Stenberg
Verifies that the change in 68f0166a92 works as intended and that different HTTP auth credentials to the same host still re-uses the connection properly.
2014-05-18maketgz: remove CRLF newlinesDaniel Stenberg
2014-05-18Makefile.am: Corrected a couple of grammar errorsSteve Holme
2014-05-18Makefile.am: Added new Visual Studio project file generation for curl toolSteve Holme
2014-05-17Makefile.inc: Added resource file to assist Visual Studio project generationSteve Holme
2014-05-17maketgz: run make vc-ide before make distDaniel Stenberg
To get the VC project files generated before packaging!
2014-05-17Makefile.am: Added new Visual Studio project file generation for libcurlSteve Holme
2014-05-17Makefile.am: Removed old Visual Studio project file generationSteve Holme
2014-05-17RELEASE-NOTES: synced with 831f6dd1d986c9Daniel Stenberg
2014-05-17build: Fixed another tabulation issue in the Visual Studio file generatorSteve Holme
2014-05-17axtls: Fixed too long source lineDan Fandrich
2014-05-17configure: add GSS-API to supported featuresDaniel Stenberg
Bug: http://curl.haxx.se/bug/view.cgi?id=1344 Reported-by: Michael Osipov
2014-05-17configure: add SPNEGO to supported featuresDaniel Stenberg
Bug: http://curl.haxx.se/bug/view.cgi?id=1343 Reported-by: Michael Osipov
2014-05-16axtls: Add a TODO to a potential blocking call with no timeoutDan Fandrich
2014-05-16curl_easy_getinfo.3: clarify CURLINFO_SIZE_DOWNLOADDaniel Stenberg
It counts "body" data only, no meta data, no headers.
2014-05-16curl_easy_setopt.3: prefer XFERINFOFUNCTION to PROGRESSFUNCTIONDaniel Stenberg
2014-05-15HTTP: CREDSPERREQUEST is for HTTP tooDaniel Stenberg
Commit 517b06d657ace (in 7.36.0) that brought the CREDSPERREQUEST flag only set it for HTTPS, making HTTP less good at doing connection re-use than it should be. Now set it for HTTP as well. Simple test case "curl -v -u foo:bar localhost --next -u bar:foo localhos" Bug: http://curl.haxx.se/mail/lib-2014-05/0127.html Reported-by: Kamil Dudka
2014-05-15RELEASE-NOTES: synced with 53a5b95c21586Daniel Stenberg
2014-05-15CURLINFO_SSL_VERIFYRESULT: assign at first connect callDaniel Stenberg
The variable wasn't assigned at all until step3 which would lead to a failed connect never assigning the variable and thus returning a bad value. Reported-by: Larry Lin Bug: http://curl.haxx.se/mail/lib-2014-04/0203.html
2014-05-15timers: fix timer regression involving redirects / reconnectsDaniel Stenberg
In commit 0b3750b5c23c25f (released in 7.36.0) we fixed a timeout issue but instead broke the timings. To fix this, I introduce a new timestamp to use for the timeouts and restored the previous timestamp and timestamp position so that the old timer functionality is restored. In addition to that, that change also broke connection timeouts for when more than one connect was used (as it would then count the total time from the first connect and not for the most recent one). Now Curl_timeleft() has been modified so that it checks against different start times depending on which timeout it checks. Test 1303 is updated accordingly. Bug: http://curl.haxx.se/mail/lib-2014-05/0147.html Reported-by: Ryan Braud