aboutsummaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2009-11-20- Constantine Sapuntzakis identified a write after close, as the sockets wereDaniel Stenberg
closed by libcurl before the SSL lib were shutdown and they may write to its socket. Detected to at least happen with OpenSSL builds.
2009-11-20- Jad Chamcham pointed out a bug with connection re-use. If a connection hadDaniel Stenberg
CURLOPT_HTTPPROXYTUNNEL enabled over a proxy, a subsequent request using the same proxy with the tunnel option disabled would still wrongly re-use that previous connection and the outcome would only be badness.
2009-11-19Explicit initialization of all FTP struct members in ftp_init()Yang Tse
2009-11-18Fix compiler warning: ISO C90 forbids mixed declarations and codeYang Tse
2009-11-18Make memory tracking system intolerant with zero sized malloc(),Yang Tse
calloc() and realloc() function calls.
2009-11-18Make usage of calloc()'s arguments consistent with rest of code baseYang Tse
2009-11-17- Constantine Sapuntzakis provided another fix for the DNS cache that couldDaniel Stenberg
end up with entries that wouldn't time-out: 1. Set up a first web server that redirects (307) to a http://server:port that's down 2. Have curl connect to the first web server using curl multi After the curl_easy_cleanup call, there will be curl dns entries hanging around with in_use != 0. (http://curl.haxx.se/bug/view.cgi?id=2891591)
2009-11-15Client certificate ENG file type requires OpenSSL 0.9.7 or newerYang Tse
2009-11-15Remove enable-thread / disable-thread configure option. These were only placeboYang Tse
options. The library is always built as thread safe as possible on every system.
2009-11-14Refactor how preprocessor symbol _THREAD_SAFE definition is done.Yang Tse
2009-11-14OpenSSL 0.9.7 or newer required for ENGINE_CTRL_GET_CMD_FROM_NAME definitionYang Tse
2009-11-14- Camille Moncelier added support for the file type SSL_FILETYPE_ENGINE forDaniel Stenberg
the client certificate. It also disable the key name test as some engines can select a private key/cert automatically (When there is only one key and/or certificate on the hardware device used by the engine)
2009-11-14- Constantine Sapuntzakis provided the fix that ensures that an SSL connectionYang Tse
won't be reused unless protection level for peer and host verification match.
2009-11-12Constantine Sapuntzakis patch for hostip.cYang Tse
No need for a separate variable ndns. The memory leak detection will detect code that fails to release a dns reference. The DEBUGASSERT will detect code that releases too many references.
2009-11-12Add missing variable initializationYang Tse
2009-11-12- libcurl-NSS now tries to reconnect with TLS disabled in case it detectsKamil Dudka
a broken TLS server. However it does not happen if SSL version is selected manually. The approach was originally taken from PSM. Kaspar Brand helped me to complete the patch. Original bug reports: https://bugzilla.redhat.com/525496 https://bugzilla.redhat.com/527771
2009-11-12- Kevin Baughman provided a fix preventing libcurl-NSS from crash on doublyKamil Dudka
closed NSPR descriptor. The issue was hard to find, reported several times before and always closed unresolved. More info at the RH bug: https://bugzilla.redhat.com/534176
2009-11-12Make hostip.c compile againYang Tse
2009-11-11- Marco Maggi reported that compilation failed when configured --with-gssapiYang Tse
and GNU GSS installed due to a missing mutual exclusion of header files in the Kerberos 5 code path. He also verified that my patch worked for him.
2009-11-11- Constantine Sapuntzakis posted bug #2891595Daniel Stenberg
(http://curl.haxx.se/bug/view.cgi?id=2891595) which identified how an entry in the DNS cache would linger too long if the request that added it was in use that long. He also provided the patch that now makes libcurl capable of still doing a request while the DNS hash entry may get timed out.
2009-11-11- Christian Schmitz noticed that the progress meter/callback was not properlyDaniel Stenberg
used during the FTP connection phase (after the actual TCP connect), while it of course should be. I also made the speed check get called correctly so that really slow servers will trigger that properly too.
2009-11-05- Dropped misleading timeouts in libcurl-NSS and made sure the SSL socket worksKamil Dudka
in non-blocking mode.
2009-11-05I removed leading 'curl' path on the 'curlbuild.h' include statement inYang Tse
curl.h, adjusting auto-makefiles include path, to enhance portability to OS's without an orthogonal directory tree structure such as OS/400.
2009-11-05avoid division by zeroYang Tse
2009-11-04- I fixed several problems with the transfer progress meter. It showed theDaniel Stenberg
wrong percentage for small files, most notable for <1000 bytes and could easily end up showing more than 100% at the end. It also didn't show any percentage, transfer size or estimated transfer times when transferring less than 100 bytes.
2009-11-02include progress.h for Curl_pgrsSetDownloadCounter function prototypeYang Tse
2009-11-02- As reported independent by both Stan van de Burgt and Didier Brisebourg,Daniel Stenberg
CURLINFO_SIZE_DOWNLOAD (the -w variable size_download) didn't work when getting data from ldap!
2009-11-02describe the cmake situationDaniel Stenberg
2009-10-31- Gabriel Kuri reported a problem with CURLINFO_CONTENT_LENGTH_DOWNLOAD if theDaniel Stenberg
download was 0 bytes, as libcurl would then return the size as unknown (-1) and not 0. I wrote a fix and test case 566 to verify it.
2009-10-30- Liza Alenchery mentioned a problem with re-used SCP connection when a badDaniel Stenberg
auth is used, as it caused a crash. I failed to repeat the issue, but still made a change that now forces the TCP connection used for a freed SCP session to get closed and not be re-used.
2009-10-30- "Tom" posted a bug report that mentioned how libcurl did wrong when doing aDaniel Stenberg
POST using a read callback, with Digest authentication and "Transfer-Encoding: chunked" enforced. I would then cause the first request to be wrongly sent and then basically hang until the server closed the connection. I fixed the problem and added test case 565 to verify it.
2009-10-29Fix compiler warning: control reaches end of non-void functionYang Tse
2009-10-29Take in account c-ares 1.6.1 will use __declspec function decorationYang Tse
for Win32 and Symbian unless CARES_STATICLIB is defined to use static library linkage.
2009-10-28Since the NSS lib closes the socket the memory tracking system wrongly gets aDaniel Stenberg
false positive on a leaked socket, so this introduces a way to tell the system that the socket is indeed closed without explicitly closing it!
2009-10-27Fix spellingYang Tse
2009-10-27Fix Pelles C Win32 target compilation issuesYang Tse
2009-10-25- Dima Barsky made the curl cookie parser accept cookies even with blank orDaniel Stenberg
unparsable expiry dates and then treat them as session cookies - previously libcurl would reject cookies with a date format it couldn't parse. Research shows that the major browser treat such cookies as session cookies. I modified test 8 and 31 to verify this.
2009-10-21Update memory tracking/debugging referenceYang Tse
2009-10-21spelling correctionsDaniel Stenberg
2009-10-21Detect when msvc 6.0 is in use without PSDK installed, intentionallyYang Tse
fail to build when this happens, and show an appropriate error. The brave of heart can circumvect this. Defining ALLOW_MSVC6_WITHOUT_PSDK in lib/config-win32.h, although absolutely discouraged and unsupported, this will allow the die hard MSVC hacker to build in such a discouraged environment. The actually supported 'fix' is to install 'February 2003 Platform SDK' a.k.a. 'Windows Server 2003 PSDK' which can be freely downloaded from http://www.microsoft.com/msdownload/platformsdk/sdkupdate/psdk-full.htm
2009-10-19added cast macros to silent compiler warnings with 64-bit systems.Gunter Knauf
2009-10-18- Ray Dassen provided a patch in Debian's bug tracker (bug number #551461)Daniel Stenberg
that now makes curl_getdate(3) actually handles RFC 822 formatted dates that use the "single letter military timezones". http://www.rfc-ref.org/RFC-TEXTS/822/chapter5.html has the details.
2009-10-18Check for basename() is now done the same as other function checksYang Tse
2009-10-18- Fixed memory leak in the SCP/SFTP code as it never freed the knownhostsDaniel Stenberg
data!
2009-10-18John Dennis filed bug report #2873666Daniel Stenberg
(http://curl.haxx.se/bug/view.cgi?id=2873666) which identified a problem which made libcurl loop infinitely when given incorrect credentials when using HTTP GSS negotiate authentication.
2009-10-18- Kevin Baughman found a double close() problem with libcurl-NSS, as whenDaniel Stenberg
libcurl called NSS to close the SSL "session" it also closed the actual socket.
2009-10-17README.NSS is goneDaniel Stenberg
2009-10-14we only need to call ASN1_STRING_length() if ASN1_STRING_type() detects UTF-8,Gunter Knauf
else ASN1_STRING_to_UTF8() returns the string length.
2009-10-13Update LDAP URL format referenceYang Tse
2009-10-08Attempt to silence bogus compiler warning: "Potential null pointer dereference"Yang Tse