aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-07-30http: move HTTP/2 cleanup code off http_disconnect()Kamil Dudka
Otherwise it would never be called for an HTTP/2 connection, which has its own disconnect handler. I spotted this while debugging <https://bugzilla.redhat.com/1248389> where the http_disconnect() handler was called on an FTP session handle causing 'dnf' to crash. conn->data->req.protop of type (struct FTP *) was reinterpreted as type (struct HTTP *) which resulted in SIGSEGV in Curl_add_buffer_free() after printing the "Connection cache is full, closing the oldest one." message. A previously working version of libcurl started to crash after it was recompiled with the HTTP/2 support despite the HTTP/2 protocol was not actually used. This commit makes it work again although I suspect the root cause (reinterpreting session handle data of incompatible protocol) still has to be fixed. Otherwise the same will happen when mixing FTP and HTTP/2 connections and exceeding the connection cache limit. Reported-by: Tomas Tomecek Bug: https://bugzilla.redhat.com/1248389
2015-07-30ABI doc: use secure URLViktor Szakats
2015-07-30ABI: remove the ascii logoDaniel Stenberg
and made the indent level to 1
2015-07-30libcurl-multi.3: mention curl_multi_waitDaniel Stenberg
... and some general rewordings to improve this docs. Reported-by: Tim Stack Closes #356
2015-07-30maketgz: Fixed some VC makefiles missing from the release tarballSteve Holme
VC7, VC11, VC12 and VC14 makefiles were missing from the release tarball.
2015-07-29RELEASE-NOTES: Synced with 2d7e165761Steve Holme
2015-07-29build: Added VC14 project files to Makefile.amSteve Holme
2015-07-29build: Added VC14 project filesSteve Holme
Updates to Makefile.am for the generation of the project files in the tarball to follow.
2015-07-29libcurl-thread.3: Clarify CURLOPT_NOSIGNAL takes long value 1LJay Satiro
2015-07-28generate.bat: Use lower-case for commands and reserved keywordsSteve Holme
Whilst there are no coding standards for the batch files used in curl, most tend to use lower-case for keywords and upper-case for variables.
2015-07-28build: Added initial VC14 support to generate.batSteve Holme
Visual Studio project files and updates to makefile.am to follow.
2015-07-28build: Fixed missing .opensdf files from VC10+ .gitignore filesSteve Holme
2015-07-28build: Use $(ProjectName) macro for curl.exe and curld.exe filenamesSteve Holme
This wasn't possible with the old curlsrc project filenames, but like commit 2a615a2b64 and 11397eb6dd for libcurl use the built in Visual Studio macros for the output filenames.
2015-07-28build: Renamed curl src Visual Studio project filesSteve Holme
Following commit 957fcd9049 and in preparation for adding the VC14 project files renamed the curl source project files.
2015-07-28libcurl-thread.3: Revert to stricter handle wordingJay Satiro
.. also update formatting and add WinSSL and wolfSSL to the SSL/TLS handlers list.
2015-07-28libcurl-thread.3: Consolidate thread safety infoJay Satiro
This is a new document to consolidate our thread safety information from several documents (curl-www:features, libcurl.3, libcurl-tutorial.3). Each document's section on multi-threading will now point to this one.
2015-07-27README: Corrected formatting for 'Legacy Windows and SSL' sectionSteve Holme
...as well as some wording.
2015-07-26build-openssl.bat: Added support for VC14Steve Holme
2015-07-26RELEASE-NOTES: synced with 0f645adc95390e8Daniel Stenberg
2015-07-26test1902: attempt to make the test more reliableDaniel Stenberg
Closes #355
2015-07-26comment: fix comment about adding new option supportDaniel Stenberg
2015-07-25build-openssl.bat: Show syntax if required args are missingJay Satiro
2015-07-26TODO: improve how curl works in a windows console windowDaniel Stenberg
Closes #322 for now
2015-07-261.11 minimize dependencies with dynamicly loaded modulesDaniel Stenberg
Closes #349 for now
2015-07-25tool_operate: Fix CURLOPT_SSL_OPTIONS for builds without HTTPSJay Satiro
- Set CURLOPT_SSL_OPTIONS only if the tool enabled an SSL option. Broken by me several days ago in 172b2be. https://github.com/bagder/curl/commit/172b2be#diff-70b44ee478e58d4e1ddcf9c9a73d257b Bug: http://curl.haxx.se/mail/lib-2015-07/0119.html Reported-by: Dan Fandrich
2015-07-25configure: check if OpenSSL linking wants -ldlDaniel Stenberg
To make it easier to link with static versions of OpenSSL, the configure script now checks if -ldl is needed for linking. Help-by: TJ Saunders
2015-07-25HTTP: ignore "Content-Encoding: compress"Michael Kaufmann
Currently, libcurl rejects responses with "Content-Encoding: compress" when CURLOPT_ACCEPT_ENCODING is set to "". I think that libcurl should treat the Content-Encoding "compress" the same as other Content-Encodings that it does not support, e.g. "bzip2". That means just ignoring it.
2015-07-24openssl: work around MSVC warningMarcel Raad
MSVC 12 complains: lib\vtls\openssl.c(1554): warning C4701: potentially uninitialized local variable 'verstr' used It's a false positive, but as it's normally not, I have enabled warning-as-error for that warning.
2015-07-24configure: add --disable-rt optionMichał Fita
This option disables any attempts in configure to create dependency on stuff requiring linking to librt.so and libpthread.so, in this case this means clock_gettime(CLOCK_MONOTONIC, &mt). We were in need to build curl which doesn't link libpthread.so to avoid the following bug: https://sourceware.org/bugzilla/show_bug.cgi?id=16628.
2015-07-23http2: verify success of strchr() in http2_send()Kamil Dudka
Detected by Coverity. Error: NULL_RETURNS: lib/http2.c:1301: returned_null: "strchr" returns null (checked 103 out of 109 times). lib/http2.c:1301: var_assigned: Assigning: "hdbuf" = null return value from "strchr". lib/http2.c:1302: dereference: Incrementing a pointer which might be null: "hdbuf". 1300| 1301| hdbuf = strchr(hdbuf, 0x0a); 1302|-> ++hdbuf; 1303| 1304| authority_idx = 0;
2015-07-22Windows: Fix VerifyVersionInfo callsJay Satiro
- Fix the VerifyVersionInfo calls, which we use to test for the OS major version, to also test for the minor version as well as the service pack major and minor versions. MSDN: "If you are testing the major version, you must also test the minor version and the service pack major and minor versions." https://msdn.microsoft.com/en-us/library/windows/desktop/ms725492.aspx Bug: https://github.com/bagder/curl/pull/353#issuecomment-123493098 Reported-by: Marcel Raad <MarcelRaad@users.noreply.github.com>
2015-07-22schannel: Replace deprecated GetVersion with VerifyVersionInfoMarcel Raad
2015-07-21makefile: Added support for VC14Steve Holme
2015-07-21os400: ebcdic wrappers for new functions. Upgrade ILE/RPG bindings.Patrick Monnerat
2015-07-21libcurl: VERSIONINFO updatePatrick Monnerat
Addition of new procedures curl_pushheader_bynum and curl_pushheader_byname requires VERSIONINFO updating.
2015-07-21http2: satisfy external references even if http2 is not compiled in.Patrick Monnerat
2015-07-20http2: add stream != NULL checks for reliabilityDaniel Stenberg
They should not trigger, but in case of internal problems we at least avoid crashes this way.
2015-07-18symbols-in-versions: Add new CURLSSLOPT_NO_REVOKE symbolJay Satiro
2015-07-17SSL: Add an option to disable certificate revocation checksJay Satiro
New tool option --ssl-no-revoke. New value CURLSSLOPT_NO_REVOKE for CURLOPT_SSL_OPTIONS. Currently this option applies only to WinSSL where we have automatic certificate revocation checking by default. According to the ssl-compared chart there are other backends that have automatic checking (NSS, wolfSSL and DarwinSSL) so we could possibly accommodate them at some later point. Bug: https://github.com/bagder/curl/issues/264 Reported-by: zenden2k <zenden2k@gmail.com>
2015-07-16runtests: Allow for spaces in curl custom pathJay Satiro
.. also fix some typos in test's FILEFORMAT spec.
2015-07-16ntlm_wb: Fix theoretical memory leakDavid Woodhouse
Static analysis indicated that my commit 9008f3d564 ("ntlm_wb: Fix hard-coded limit on NTLM auth packet size") introduced a potential memory leak on an error path, because we forget to free the buffer before returning an error. Fix this. Although actually, it never happens in practice because we never *get* here with state == NTLMSTATE_TYPE1. The state is always zero. That might want cleaning up in a separate patch. Reported-by: Terri Oda
2015-07-15strerror: Add CRYPT_E_REVOKED to SSPI error stringsJay Satiro
2015-07-14libtest: call PR_Cleanup() on exit if NSPR is usedKamil Dudka
This prevents valgrind from reporting possibly lost memory that NSPR uses for file descriptor cache and other globally allocated internal data structures. Reported-by: Štefan Kremeň
2015-07-14openssl: VMS support for SHA256John Malmberg
setup-vms.h: More symbols for SHA256, hacks for older VAX openssl.h: Use OpenSSL OPENSSL_NO_SHA256 macro to allow building on VAX. openssl.c: Use OpenSSL version checks and OPENSSL_NO_SHA256 macro to allow building on VAX and 64 bit VMS.
2015-07-11examples: Fix typo in multi-single.cJay Satiro
2015-07-07http2: Fix memory leak in push header arrayTatsuhiro Tsujikawa
2015-07-02test2041: fixed line endings in protocol partDan Fandrich
2015-07-02cyassl: fixed mismatched sha256sum function prototypeDan Fandrich
2015-07-01SSL: Pinned public key hash supportmoparisthebest
2015-07-01examples: provide <DESC> sectionsDaniel Stenberg