aboutsummaryrefslogtreecommitdiff
path: root/RELEASE-NOTES
AgeCommit message (Collapse)Author
2006-04-05Michele Bini modified the NTLM code to work for his "weird IIS case"Daniel Stenberg
(http://curl.haxx.se/mail/lib-2006-02/0154.html) by adding the NTLM hash function in addition to the LM one and making some other adjustments in the order the different parts of the data block are sent in the Type-2 reply. Inspiration for this work was taken from the Firefox NTLM implementation. I edited the existing 21(!) NTLM test cases to run fine with these news. Due to the fact that we now properly include the host name in the Type-2 message the test cases now only compare parts of that chunk.
2006-03-28#1451929 (http://curl.haxx.se/bug/view.cgi?id=1451929) detailed a bug thatDaniel Stenberg
occurred when asking libcurl to follow HTTP redirects and the original URL had more than one question mark (?). Added test case 276 to verify.
2006-03-27David Byron found a problem multiple -d options when libcurl was built withDaniel Stenberg
--enable-debug, as then curl used free() on memory allocated both with normal malloc() and with libcurl-provided functions, when the latter MUST be freed with curl_free() in debug builds.
2006-03-26Tor Arntsen figured out that TFTP was broken on a lot of systems since weDaniel Stenberg
called bind() with a too big argument in the 3rd parameter and at least Tru64, AIX and IRIX seem to be very picky about it.
2006-03-21David McCreedy added CURLINFO_FTP_ENTRY_PATH to export the FTP entry pathDaniel Stenberg
2006-03-21Xavier Bouchoux made the SSL connection non-blocking for the multi interfaceDaniel Stenberg
(when using OpenSSL).
2006-03-21Tor Arntsen fixed the AIX Toolbox RPM specDaniel Stenberg
2006-03-20David McCreedy fixed libcurl to no longer ignore AUTH failures and now itDaniel Stenberg
reacts properly according to the CURLOPT_FTP_SSL setting.
2006-03-20mention today's fixesDaniel Stenberg
2006-03-20start working towards 7.15.4Daniel Stenberg
2006-03-20fixed tftp packet overflow riskDaniel Stenberg
2006-03-07Markus Koetter filed debian bug report #355715 which identified a problemDaniel Stenberg
with the multi interface and multi-part formposts. The fix from February 22nd could make the Curl_done() function get called twice on the same connection and it was not designed for that and thus tried to call free() on an already freed memory area!
2006-03-07Peter Heuchert made sure the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSLDaniel Stenberg
is used properly.
2006-03-06Lots of users on Windows have reported getting the "SSL: couldn't setDaniel Stenberg
callback" error message so I've now made the setting of that callback not be as critical as before. The function is only used for additional loggging/ trace anyway so a failure just means slightly less data. It should still be able to proceed and connect fine to the server.
2006-03-04build fix for InterixDaniel Stenberg
2006-03-03Prevent uploading to a URL that has no file name part.Daniel Stenberg
2006-03-02mention Dan F's out-of-file handles fix from the other dayDaniel Stenberg
2006-03-02check for and use getprotobynameDaniel Stenberg
2006-02-27start over on what might become 7.15.3Daniel Stenberg
2006-02-23Lots of work and analysis by "xbx___" in bug #1431750Daniel Stenberg
(http://curl.haxx.se/bug/view.cgi?id=1431750) helped me identify and fix two different but related bugs: 1) Removing an easy handle from a multi handle before the transfer is done could leave a connection in the connection cache for that handle that is in a state that isn't suitable for re-use. A subsequent re-use could then read from a NULL pointer and segfault. 2) When an easy handle was removed from the multi handle, there could be an outstanding c-ares DNS name resolve request. When the response arrived, it caused havoc since the connection struct it "belonged" to could've been freed already. Now Curl_done() is called when an easy handle is removed from a multi handle pre-maturely (that is, before the transfer was complteted). Curl_done() also makes sure to cancel all (if any) outstanding c-ares requests.
2006-02-21Peter Su added support for SOCKS4 proxies. Enable this by setting the proxyDaniel Stenberg
type to the already provided type CURLPROXY_SOCKS4. I added a --socks4 option that works like the current --socks5 option but instead use the socks4 protocol.
2006-02-19Shmulik Regev fixed an issue with multi-pass authentication and compressedDaniel Stenberg
content when libcurl didn't honor the internal ignorebody flag.
2006-02-18Ulf Härnhammar fixed a format string (printf style) problem in the NegotiateDaniel Stenberg
code. It should however not be the cause of any troubles. He also fixed a few similar problems in the HTTP test server code.
2006-02-16Shmulik Regev provided a fix for the DNS cache when using short life times,Daniel Stenberg
as previously it could be holding on to old cached entries longer than requested.
2006-02-11Karl M added the CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET options thatDaniel Stenberg
an app can use to let libcurl only connect to a remote host and then extract the socket from libcurl. libcurl will then not attempt to do any transfer at all after the connect is done.
2006-02-11Kent Boortz improved the configure check for GnuTLS to properly set LIBSDaniel Stenberg
instead of LDFLAGS.
2006-02-07Philippe Vaucher provided a brilliant piece of test code that show a problemDaniel Stenberg
with re-used FTP connections. If the second request on the same connection was set not to fetch a "body", libcurl could get confused and consider it an attempt to use a dead connection and would go acting mighty strange.
2006-02-01fixed --limit-rateDaniel Stenberg
2006-01-30Added CURLOPT_LOCALPORT and CURLOPT_LOCALPORTRANGE to libcurl. Set with theDaniel Stenberg
curl tool with --local-port. Plain and simply set the range of ports to bind the local end of connections to. Implemented on to popular demand. Not extensively tested. Please let me know how it works.
2006-01-30Based on an error report by Philippe Vaucher, we no longer count a retriedDaniel Stenberg
connection setup as a follow-redirect. It turns out 1) this fails when a FTP connection is re-setup and 2) it does make the max-redirs counter behave wrong. This fix was not verified since the reporter vanished, but I believe this is the right fix nonetheless.
2006-01-29more mirrorsDaniel Stenberg
2006-01-24Michal Marek provided a patch for FTP that makes libcurl continue to try PASVDaniel Stenberg
even after EPSV returned a positive response code, if libcurl failed to connect to the port number the EPSV response said. Obviously some people are going through protocol-sensitive firewalls (or similar) that don't understand EPSV and then they don't allow the second connection unless PASV was used. This also called for a minor fix of test case 238.
2006-01-20the second -P fixDaniel Stenberg
2006-01-19Jon Turner pointed out that doing -P [hostname] with curl (built ipv4-only)Daniel Stenberg
didn't work.
2006-01-18reality syncDaniel Stenberg
2006-01-18configure no longer warns on "missing" if the current path contains a spaceDaniel Stenberg
2006-01-16David Shaw finally removed all traces of Gopher and we are now officiallyDaniel Stenberg
not supporting it. It hasn't been functioning for years anyway, so this is just finally stating what already was true. And a cleanup at the same time.
2006-01-15Bryan Henderson turned the 'initialized' variable for curl_global_init()Daniel Stenberg
into a counter, and thus you can now do multiple curl_global_init() and you are then supposed to do the same amount of calls to curl_global_cleanup(). Bryan also updated the docs accordingly.
2006-01-13Andrew Benham fixed a race condition in the test suite that could cause theDaniel Stenberg
test script to kill all processes in the current process group!
2006-01-12Fixed FTP_SKIP_PASV_IP and FTP_USE_EPSV to "do right" when used on FTP thruDaniel Stenberg
HTTP proxy.
2006-01-10When using a bad path over FTP, as in when libcurl couldn't CWD into allDaniel Stenberg
given subdirs, libcurl would still "remember" the full path as if it is the current directory libcurl is in so that the next curl_easy_perform() would get really confused if it tried the same path again - as it would not issue any CWD commands at all, assuming it is already in the "proper" dir. Starting now, a failed CWD command sets a flag that prevents the path to be "remembered" after returning.
2006-01-08one more mirror, now fortunately in JapanDaniel Stenberg
2006-01-07Mike Jean fixed so that the second CONNECT when doing FTP over a HTTP proxyDaniel Stenberg
actually used a new connection and not sent the second request on the first socket!
2006-01-06buildconf fixesDaniel Stenberg
2006-01-04not much recent stuff, but still I had this modified locallyDaniel Stenberg
2005-12-16Jean Jacques Drouin pointed out that you could only have a user name orDaniel Stenberg
password of 127 bytes or less embedded in a URL, where actually the code uses a 255 byte buffer for it! Modified now to use the full buffer size.
2005-12-06start working on 7.15.2Daniel Stenberg
2005-12-067.15.1 with the now to be announced security flaw fixedDaniel Stenberg
2005-12-01Jamie Newton pointed out that libcurl's file:// code would close() a zeroDaniel Stenberg
file descriptor if given a non-existing file.
2005-11-28Bryan HendersonDaniel Stenberg