aboutsummaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2005-03-14silence compiler warnings for mingw win32 builds --enable-debugDaniel Stenberg
2005-03-14Avoid "unused variable" warnings.Gisle Vanem
2005-03-14security.h is removedDaniel Stenberg
2005-03-14include security.h with lowercase s to work on cross-compiled mingwDaniel Stenberg
2005-03-14Removed security.h since it shadows an include file mingw needs when buildingDaniel Stenberg
for SSPI support. The contents of the file has been moved into the krb4.h file.
2005-03-12Swap <security.h> and <sspi.h> (needed for MingW).Gisle Vanem
2005-03-11curl_version_info() returns the feature bit CURL_VERSION_SSPIDaniel Stenberg
2005-03-11Fixed some compiler warnings.Dan Fandrich
2005-03-11Fixed LDAP library file name bug (KNOWN_BUGS #1). configure now auto-detectsDan Fandrich
the correct dynamic library names by default, and provides override switches --with-ldap-lib, --with-lber-lib and --without-lber-lib. Added CURL_DISABLE_LDAP to platform-specific config files to disable LDAP support on those platforms that probably don't have dynamic OpenLDAP libraries available to avoid compile errors.
2005-03-10Christopher R. Palmer made it possible to build libcurl with theDaniel Stenberg
USE_WINDOWS_SSPI on Windows, and then libcurl will be built to use the native way to do NTLM. SSPI also allows libcurl to pass on the current user and its password in the request.
2005-03-09As reported by 'nodak sodak' we should check for a NULL pointer beforeDaniel Stenberg
referencing the proxy name pointer.
2005-03-08remove old printf() debug leftoverDaniel Stenberg
2005-03-08mktime() returns a time_t. time_t is often 32 bits, even on many architecturesDaniel Stenberg
that feature 64 bit 'long'. Some systems have 64 bit time_t and deal with years beyond 2038. However, even some of the systems with 64 bit time_t returns -1 for dates beyond 03:14:07 UTC, January 19, 2038. (Such as AIX 5100-06)
2005-03-08Dominick Meglio reported that using CURLOPT_FILETIME when transferring a FTPDaniel Stenberg
file got a Last-Modified: header written to the data stream, corrupting the actual data. This was because some conditions from the previous FTP code was not properly brought into the new FTP code. I fixed and I added test case 520 to verify. (This bug was introduced in 7.13.1)
2005-03-04Added test case 235 that makes a resumed upload of a file that isn't presentDaniel Stenberg
on the remote side. This then converts the operation to an ordinary STOR upload. This was requested/pointed out by Ignacio Vazquez-Abrams. It also proved (and I fixed) a bug in the newly rewritten ftp code (and present in the 7.13.1 release) when trying to resume an upload and the servers returns an error to the SIZE command. libcurl then loops and sends SIZE commands infinitely.
2005-03-04Reduced the length of data read from the random entropy file.Dan Fandrich
2005-03-04Don't try to read the whole of the random file because when /dev/urandom isDan Fandrich
used, it slows initialization too much reading an infinitely long file!
2005-03-04Dave Dribin made it possible to set CURLOPT_COOKIEFILE to "" to activateDaniel Stenberg
the cookie "engine" without having to provide an empty or non-existing file.
2005-03-04killed trailing whitespaceDaniel Stenberg
2005-03-04killed trailing whitespaceDaniel Stenberg
2005-02-28Fix for a base64 decode heap buffer overflow vulnerability.Dan Fandrich
2005-02-24Fixed some compiler warnings. Fixed a low incidence memory leak in the test ↵Dan Fandrich
server.
2005-02-22krb4 fixedDaniel Stenberg
2005-02-22Curl_base64_decode() now returns an allocated bufferDaniel Stenberg
2005-02-22Thanks for the notification iDEFENCE. We are the "initial vendor" and we sureDaniel Stenberg
got no notification, no mail, no nothing. You didn't even bother to mail us when you went public with this. Cool. NTLM buffer overflow fix, as reported here: http://www.securityfocus.com/archive/1/391042
2005-02-18Ralph Mitchell reported a flaw when you used a proxy with auth, and youDaniel Stenberg
requested data from a host and then followed a redirect to another host. libcurl then didn't use the proxy-auth properly in the second request, due to the host-only check for original host name wrongly being extended to the proxy auth as well. Added test case 233 to verify the flaw and that the fix removed the problem.
2005-02-17close the socket properly when returning error due to failing localbindDaniel Stenberg
Bug report #1124588 by David
2005-02-16Christopher R. Palmer reported a problem with HTTP-POSTing using "anyauth"Daniel Stenberg
that picks NTLM. Thanks to David Byron letting me test NTLM against his servers, I could quickly repeat and fix the problem. It turned out to be: When libcurl POSTs without knowing/using an authentication and it gets back a list of types from which it picks NTLM, it needs to either continue sending its data if it keeps the connection alive, or not send the data but close the connection. Then do the first step in the NTLM auth. libcurl didn't send the data nor close the connection but simply read the response-body and then sent the first negotiation step. Which then failed miserably of course. The fixed version forces a connection if there is more than 2000 bytes left to send.
2005-02-14Rename Curl_pretransfersec() to *_second_connect() since it does not justDaniel Stenberg
do pretransfer stuff like Curl_pretransfer().
2005-02-11Fixed bad krb4 code. It always tried to use krb4 if built enabled.Daniel Stenberg
2005-02-11Removed all uses of strftime() since it uses the localised version of theDaniel Stenberg
week day names and month names and servers don't like that.
2005-02-10typecast assign to ftpport from int to prevent warningsDaniel Stenberg
2005-02-10init fix for non-SSL buildsDaniel Stenberg
2005-02-09David Byron identified the lack of SSL_pending() use, and this is my takeDaniel Stenberg
at fixing this issue.
2005-02-09better error checking and SSL init by David ByronDaniel Stenberg
2005-02-09prevent a compiler warningDaniel Stenberg
2005-02-09Set 'bits.close' in case of malloc fail.Gisle Vanem
Don't free 'lud_dn' twice in case curl_unescape() fails.
2005-02-09Use CURL_SOCKET_BAD.Gisle Vanem
2005-02-09Handle CURLE_LOGIN_DENIED in strerror.c.Gisle Vanem
For ftp only?
2005-02-09FD_SET can be big macro, use bracesDaniel Stenberg
2005-02-09FTP code turned into state machine. Not completely yet, but a good start.Daniel Stenberg
The tag 'before_ftp_statemachine' was set just before this commit in case of future need.
2005-02-09Replace LF with CRLF. Ref RFC-2229, sec 2.3:Gisle Vanem
"Each command line must be terminated by a CRLF".
2005-02-08ares_gethostbyname wants a 'ares_host_callback' in the 4th argumentDaniel Stenberg
2005-02-08Curl_addrinfo?_callback() and addrinfo_callback() now returnsGisle Vanem
CURLE_OK or CURLE_OUT_OF_MEMORY. Add typecast in hostares.c.
2005-02-08Don't free too much in freedirs() if realloc() fails.Gisle Vanem
2005-02-08Curl_wait_for_resolv() no longer disconnects on failure, but leaves thatDaniel Stenberg
operation to the caller. Disconnecting has the disadvantage that the conn pointer gets completely invalidated and this is not handled on lots of places in the code.
2005-02-07Fix for a bug report that compressed files that are exactly 64 KiB longDan Fandrich
produce a zlib error.
2005-02-06Preserve previous status in Curl_http_done().Gisle Vanem
2005-02-04Eric Vergnaud found a use of an uninitialized variableDaniel Stenberg
2005-02-04David Byron pointed out that this -1 on the buffer size is pointless sinceDaniel Stenberg
the buffer is already BUFSIZE +1 one big to fit the extra trailing zero. This change is reported to fix David's weird SSL problem...
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 18:39:49 +0000