summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fixup - add macos special casesbagder/system-fnmatchDaniel Stenberg2018-06-011-26/+46
|
* fnmatch: use the system one if availableDaniel Stenberg2018-05-313-15/+95
| | | | | | | | | | If configure detects fnmatch to be available, use that instead of our custom one for pattern matching. For standard compliance, to reduce our footprint and to use already well tested and well exercised code. A POSIX fnmatch behaves slightly different than the internal function for a few test patterns currently, and test 1307 is adjusted for this. This is considered a bug.
* configure: check for declaration of getpwuid_rBernhard Walle2018-05-312-0/+12
| | | | | | | | | | | | | On our x86 Android toolchain, getpwuid_r is implemented but the header is missing: netrc.c:81:7: error: implicit declaration of function 'getpwuid_r' [-Werror=implicit-function-declaration] Unfortunately, the function is used in curl_ntlm_wb.c, too, so I moved the prototype to curl_setup.h. Signed-off-by: Bernhard Walle <bernhard@bwalle.de> Closes #2609
* tests: update .gitignore for libtestsRikard Falkeborn2018-05-311-6/+2
| | | | Closes #2624
* strictness: correct {infof, failf} format specifiersRikard Falkeborn2018-05-3111-35/+31
| | | | Closes #2623
* option: disallow username in URLBjörn Stenberg2018-05-3115-1/+127
| | | | | | | Adds CURLOPT_DISALLOW_USERNAME_IN_URL and --disallow-username-in-url. Makes libcurl reject URLs with a username in them. Closes #2340
* libcurl-security.3: improved layout for two rememdy listsDaniel Stenberg2018-05-311-8/+12
|
* libcurl-security.3: refer to URL instead of in-source markdown fileDaniel Stenberg2018-05-311-2/+2
|
* curl.rc: embed manifest for correct Windows version detectionViktor Szakats2018-05-304-5/+61
| | | | | | | | | | | | | | | | | | | | | | | * enable it in `src/Makefile.m32` * enable it in `winbuild/MakefileBuild.vc` if a custom manifest is _not_ enabled via the existing `EMBED_MANIFEST` option * enable it for all Windows CMake builds (also disable the built-in minimal manifest, added by CMake by default.) For other build systems, add the `-DCURL_EMBED_MANIFEST` option to the list of RC (Resource Compiler) flags to enable the manifest included in `src/curl.rc`. This may require to disable whatever automatic or other means in which way another manifest is added to `curl.exe`. Notice that Borland C doesn't support this method due to a long-pending resource compiler bug. Watcom C may also not handle it correctly when the `-zm` `wrc` option is used (this option may be unnecessary though) and regardless of options in certain earlier revisions of the 2.0 beta version. Closes https://github.com/curl/curl/pull/1221 Fixes https://github.com/curl/curl/issues/2591
* os400: sync EBCDIC wrappers and ILE/RPG binding with latest optionsPatrick Monnerat2018-05-303-2/+66
|
* os400: implement mime api EBCDIC wrappersPatrick Monnerat2018-05-303-1/+210
| | | | Also sync ILE/RPG binding to define the new functions.
* setopt: add TLS 1.3 ciphersuitesDaniel Stenberg2018-05-2919-11/+260
| | | | | | | | | | Adds CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS. curl: added --tls13-ciphers and --proxy-tls13-ciphers Fixes #2435 Reported-by: zzq1015 on github Closes #2607
* configure: override AR_FLAGS to silence warningDaniel Stenberg2018-05-291-1/+2
| | | | | | | | | | | | | | The automake default ar flags are 'cru', but the 'u' flag in there causes warnings on many modern Linux distros. Removing 'u' may have a minor performance impact on older distros but should not cause harm. Explained on the automake mailing list already back in April 2015: https://www.mail-archive.com/automake-patches@gnu.org/msg07705.html Reported-by: elephoenix on github Fixes #2617 Closes #2619
* cmake: fixed comments in compile checks codeSergei Nikulov2018-05-291-3/+3
|
* INSTALL: LDFLAGS=-Wl,-R/usr/local/ssl/libDaniel Stenberg2018-05-291-3/+2
| | | | | | | | ... the older description doesn't work Reported-by: Peter Varga Fixes #2615 Closes #2616
* KNOWN_BUGS: restore text regarding #2101.Will Dietz2018-05-291-0/+3
| | | | | | | | | | | | | | | | | | This was added earlier but appears to have been removed accidentally. AFAICT this is very much still an issue. ----- I say "accidentally" because the text seems to have harmlessly snuck into [1] (which makes no mention of it). [1] was later reverted for unspecified reasons in [2], presumably because the mentioned issue was fixed or invalid. [1] de9fac00c40db321d44fa6fbab6eb62ec4c83998 [2] 16d1f369403cbb04bd7b085eabbeebf159473fc2 Closes #2618
* fnmatch: insist on escaped bracket to matchDaniel Stenberg2018-05-282-6/+15
| | | | | | | | | | | | A non-escaped bracket ([) is for a character group - as documented. It will *not* match an individual bracket anymore. Test case 1307 updated accordingly to match. Problem detected by OSS-Fuzz, although this fix is probably not a final fix for the notorious timeout issues. Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8525 Closes #2614
* psl: use latest psl and refresh it periodicallyPatrick Monnerat2018-05-2814-29/+254
| | | | | | | | | | | The latest psl is cached in the multi or share handle. It is refreshed before use after 72 hours. New share lock CURL_LOCK_DATA_PSL controls the psl cache sharing. If the latest psl is not available, the builtin psl is used. Reported-by: Yaakov Selkowitz Fixes #2553 Closes #2601
* configure: fix ssh2 linking when built with a static mbedtlsFabrice Fontaine2018-05-281-1/+1
| | | | | | | | | | | | | | | | | | | The ssh2 pkg-config file could contain the following lines when build with a static version of mbedtls: Libs: -L${libdir} -lssh2 /xxx/libmbedcrypto.a Libs.private: /xxx/libmbedcrypto.a This static mbedtls library must be used to correctly detect ssh2 support and this library must be copied in libcurl.pc otherwise compilation of any application (such as upmpdcli) with libcurl will fail when trying to found mbedtls functions included in libssh2. So, replace pkg-config --libs-only-l by pkg-config --libs. Fixes: - http://autobuild.buildroot.net/results/43e24b22a77f616d6198c10435dcc23cc3b9088a Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Closes #2613
* RELEASE-NOTES: syncedDaniel Stenberg2018-05-281-3/+34
|
* cmake: check for getpwuid_rBernhard Walle2018-05-282-0/+4
| | | | | | | The autotools-based build system does it, so we do it also in CMake. Bug: #2609 Signed-off-by: Bernhard Walle <bernhard@bwalle.de>
* cmdline-opts/gen.pl: warn if mutexes: or see-also: list non-existing optionsDaniel Stenberg2018-05-281-0/+6
|
* curl.1: Fix cmdline-opts reference errors.Frank Gevaerts2018-05-283-3/+3
| | | | | | | | | --data, --form, and --ntlm were declared to be mutually exclusive with non-existing options. --data and --form referred to --upload (which is short for --upload-file and therefore did work, so this one was merely a bit confusing), --ntlm referred to --negotiated instead of --negotiate. Closes #2612
* docs: fix cmdline-opts metadata headers case consistency.Frank Gevaerts2018-05-2812-14/+14
| | | | Almost all headers start with an uppercase letter, but some didn't.
* mailmap: Max SavenkovDaniel Stenberg2018-05-281-0/+1
|
* Fix the test for fsetxattr and strerror_r tests in CMake to work without ↵maxed2018-05-282-17/+17
| | | | compiling
* mailmap: a Richard Alcock fixupDaniel Stenberg2018-05-271-0/+1
|
* schannel: add failf calls for client certificate failuresralcock2018-05-271-0/+4
| | | | Closes #2604
* winbuild: In MakefileBuild.vc fix typo DISTDIR->DIRDISTrichardthe3rd2018-05-271-1/+1
| | | | | | Change requirement from $(DISTDIR) to $(DIRDIST) closes #2603
* winbuild: only delete OUTFILE if it existsrichardthe3rd2018-05-271-1/+3
| | | | | | | | This removes the slightly annoying "Could not file LIBCURL_OBJS.inc" and "Could not find CURL_OBJS.inc.inc" message when building into a clean folder. closes #2602
* content_encoding: handle zlib versions too old for Z_BLOCKAlejandro R. Sedeño2018-05-251-0/+6
| | | | | | | Fallback on Z_SYNC_FLUSH when Z_BLOCK is not available. Fixes #2606 Closes #2608
* multi: provide a socket to wait for in Curl_protocol_getsockDaniel Stenberg2018-05-241-1/+5
| | | | | | | | ... even when there's no protocol specific handler setup. Bug: https://curl.haxx.se/mail/lib-2018-05/0062.html Reported-by: Sean Miller Closes #2600
* httpauth: add support for Bearer tokensLinus Lewandowski2018-05-248-5/+124
| | | | Closes #2102
* TODO: CURLINFO_PAUSE_STATEDaniel Stenberg2018-05-241-0/+6
| | | | Closes #2588
* cmake: set -d postfix for debug builds if not specifiedSergei Nikulov2018-05-245-24/+3
| | | | | | using -DCMAKE_DEBUG_POSTFIX explicitly fixes #2121, obsoletes #2384
* configure: add basic test of --with-ssl prefixDaniel Stenberg2018-05-231-1/+3
| | | | | | | | | | When given a prefix, the $PREFIX_OPENSSL/lib/openssl.pc or $PREFIX_OPENSSL/include/openssl/ssl.h files must be present or cause an error. Helps users detect when giving configure the wrong path. Reported-by: Oleg Pudeyev Assisted-by: Per Malmberg Fixes #2580
* http resume: skip body if http code 416 (range error) is ignored.Patrick Monnerat2018-05-226-14/+262
| | | | | | | | | | | | This avoids appending error data to already existing good data. Test 92 is updated to match this change. New test 1156 checks all combinations of --range/--resume, --fail, Content-Range header and http status code 200/416. Fixes #1163 Reported-By: Ithubg on github Closes #2578
* tftp: make sure error is zero terminated before printfing itDaniel Stenberg2018-05-221-1/+4
|
* configure: add missing m4/ax_compile_check_sizeof.m4Daniel Stenberg2018-05-221-0/+115
| | | | follow-up to mistake in 6876ccf90b4
* schannel: make CAinfo parsing resilient to CR/LFJohannes Schindelin2018-05-221-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | OpenSSL has supported --cacert for ages, always accepting LF-only line endings ("Unix line endings") as well as CR/LF line endings ("Windows line endings"). When we introduced support for --cacert also with Secure Channel (or in cURL speak: "WinSSL"), we did not take care to support CR/LF line endings, too, even if we are much more likely to receive input in that form when using Windows. Let's fix that. Happily, CryptQueryObject(), the function we use to parse the ca-bundle, accepts CR/LF input already, and the trailing LF before the END CERTIFICATE marker catches naturally any CR/LF line ending, too. So all we need to care about is the BEGIN CERTIFICATE marker. We do not actually need to verify here that the line ending is CR/LF. Just checking for a CR or an LF is really plenty enough. Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de> Closes https://github.com/curl/curl/pull/2592
* CURLOPT_ACCEPT_ENCODING.3: add brotli and clarify a bitDaniel Stenberg2018-05-221-6/+14
|
* RELEASE-NOTES: syncedDaniel Stenberg2018-05-221-4/+24
|
* KNOWN_BUGS: mention the -O with %-encoded file namesDaniel Stenberg2018-05-211-2/+9
| | | | Closes #2573
* checksrc: make sure sizeof() is used *with* parenthesesDaniel Stenberg2018-05-2125-64/+77
| | | | | | ... and unify the source code to adhere. Closes #2563
* curl: added --styled-outputDaniel Stenberg2018-05-217-5/+19
| | | | | | | It is enabled by default, so --no-styled-output will switch off the detection/use of bold headers. Closes #2538
* curl: show headers in boldDaniel Stenberg2018-05-2122-55/+81
| | | | | | | | | | | | | | | | | | The feature is only enabled if the output is believed to be a tty. -J: There's some minor differences and improvements in -J handling, as now J should work with -i and it actually creates a file first using the initial name and then *renames* that to the one found in Content-Disposition (if any). -i: only shows headers for HTTP transfers now (as documented). Previously it would also show for pieces of the transfer that were HTTP (for example when doing FTP over a HTTP proxy). -i: now shows trailers as well. Previously they were not shown at all. --libcurl: the CURLOPT_HEADER is no longer set, as the header output is now done in the header callback.
* configure: compile-time SIZEOF checksDaniel Stenberg2018-05-211-8/+8
| | | | | | | | | ... instead of exeucting code to get the size. Removes the use of LD_LIBRARY_PATH for this. Fixes #2586 Closes #2589 Reported-by: Bernhard Walle
* configure: replace AC_TRY_RUN with CURL_RUN_IFELSEDaniel Stenberg2018-05-212-3/+4
| | | | | | | | ... and export LD_LIBRARY_PATH properly. This is a follow-up from 2d4c215. Fixes #2586 Reported-by: Bernhard Walle
* docs: clarify CURLOPT_HTTPGET somewhatDaniel Stenberg2018-05-213-9/+14
| | | | | Reported-by: bsammon on github Fixes #2590
* curl_fnmatch: only allow two asterisks for matchingDaniel Stenberg2018-05-183-7/+3
| | | | | | | | | | | | | The previous limit of 5 can still end up in situation that takes a very long time and consumes a lot of CPU. If there is still a rare use case for this, a user can provide their own fnmatch callback for a version that allows a larger set of wildcards. This commit was triggered by yet another OSS-Fuzz timeout due to this. Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8369 Closes #2587