summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* time: support > year 2038 time stamps for system with 32bit longbagder/time-as-curl_off_tDaniel Stenberg2018-01-2914-21/+193
| | | | | | | ... with the introduction of CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T. Fixes #2238
* curl_ctype: private is*() type macros and functionsDaniel Stenberg2018-01-297-38/+176
| | | | | | | | ... since the libc provided one are locale dependent in a way we don't want. Also, the "native" isalnum() (for example) works differently on different platforms which caused test 1307 failures on macos only. Closes #2269
* build: open VC15 projects with VS 2017Marcel Raad2018-01-293-3/+3
| | | | | Previously, they were opened with Visual Studio 2015 by default, which cannot build them.
* RELEASE-NOTES: synced with 094647fcaDaniel Stenberg2018-01-291-3/+21
|
* TODO: UTF-8 filenames in Content-DispositionDaniel Stenberg2018-01-281-0/+8
| | | | Closes #1888
* KNOWN_BUGS: DICT responses show the underlying protocolDaniel Stenberg2018-01-281-0/+11
| | | | Closes #1809
* docs: fix typos in man pagesAlessandro Ghedini2018-01-272-3/+3
| | | | Closes https://github.com/curl/curl/pull/2266
* lib555: drop text conversion and encode data as ascii codesPatrick Monnerat2018-01-262-14/+14
| | | | | | | | | If CURL_DOES_CONVERSION is enabled, uploaded LFs are mapped to CRLFs, giving a result that is different from what is expected. This commit avoids using CURLOPT_TRANSFERTEXT and directly encodes data to upload in ascii. Bug: https://github.com/curl/curl/pull/1872
* lib517: make variable static to avoid compiler warningDaniel Stenberg2018-01-261-1/+1
| | | | ... with clang on macos
* lib544: sync ascii code data with textual dataPatrick Monnerat2018-01-261-4/+7
| | | | | | | Data mismatch caused test 545 to fail when character encoding conversion is enabled. Bug: https://github.com/curl/curl/pull/1872
* GSKit: restore pinnedpubkey functionalitymoparisthebest2018-01-252-2/+4
| | | | | | inadvertently removed in 283babfaf8d8f3bab9d3c63cea94eb0b84e79c37 Closes #2263
* darwinssl: Don't import client certificates into Keychain on macOSDair Grant2018-01-251-12/+61
| | | | Closes #2085
* configure: fix the check for unsigned time_tDaniel Stenberg2018-01-251-1/+1
| | | | | | Assign the time_t variable negative value and then check if it is greater than zero, which will evaluate true for unsigned time_t but false for signed time_t.
* parsedate: fix date parsing for systems with 32 bit longDaniel Stenberg2018-01-256-239/+226
| | | | | | | | | | | Make curl_getdate() handle dates before 1970 as well (returning negative values). Make test 517 test dates for 64 bit time_t. This fixes bug (3) mentioned in #2238 Closes #2250
* openssl: fix pinned public key build error in FIPS modeMcDonough, Tim2018-01-251-10/+18
| | | | | | | | | | | | | | | | | | Here is a version that should work with all versions of openssl 0.9.7 through 1.1.0. Links to the docs: https://www.openssl.org/docs/man1.0.2/crypto/EVP_DigestInit.html https://www.openssl.org/docs/man1.1.0/crypto/EVP_DigestInit.html At the very bottom of the 1.1.0 documentation there is a history section that states, " stack allocated EVP_MD_CTXs are no longer supported." If EVP_MD_CTX_create and EVP_MD_CTX_destroy are not defined, then a simple mapping can be used as described here: https://wiki.openssl.org/index.php/Talk:OpenSSL_1.1.0_Changes Closes #2258
* SChannel/WinSSL: Replace Curl_none_md5sum with Curl_schannel_md5summoparisthebest2018-01-251-1/+10
|
* SChannel/WinSSL: Implement public key pinningmoparisthebest2018-01-253-4/+146
| | | | Closes #1429
* bump: towards 7.58.1Daniel Stenberg2018-01-252-161/+11
|
* cookies: remove verbose "cookie size:" outputDaniel Stenberg2018-01-251-4/+1
| | | | | It was once used for some debugging/verifying logic but should never have ended up in git!
* TODO: hardcode the "localhost" addressesDaniel Stenberg2018-01-251-0/+12
|
* TODO: CURL_REFUSE_CLEARTEXTDaniel Stenberg2018-01-251-0/+10
| | | | An idea that popped up in discussions on twitter.
* progress-bar: don't use stderr explicitly, use bar->outDaniel Stenberg2018-01-241-1/+1
| | | | | Reported-By: Gisle Vanem Bug: https://github.com/curl/curl/commit/993dd5651a6c853bfe3870f6a69c7b329fa4e8ce#commitcomment-27070080
* Fixes for MSDOS etc.Gisle Vanem2018-01-241-4/+4
| | | | | | | | djgpp do have 'mkdir(dir, mode)'. Other DOS-compilers does not But djgpp seems the only choice for MSDOS anyway. PellesC do have a 'F_OK' defined in it's <unistd.h>. Update year in Copyright.
* Fix small typo.Gisle Vanem2018-01-241-2/+2
|
* RELEASE: 7.58.0curl-7_58_0Daniel Stenberg2018-01-232-17/+44
|
* progress-bar: get screen width on windowsGisle Vanem2018-01-231-0/+15
|
* test1454: --connect-to with IPv6 address w/o IPv6 support!Daniel Stenberg2018-01-232-1/+39
|
* CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 supportDaniel Stenberg2018-01-231-1/+7
| | | | | | | Bug: https://curl.haxx.se/mail/lib-2018-01/0087.html Reported-by: John Hascall Closes #2257
* docs: fix man page syntax to make test 1140 OK againDaniel Stenberg2018-01-232-4/+4
|
* http: prevent custom Authorization headers in redirectsDaniel Stenberg2018-01-227-5/+212
| | | | | | | | | | | | ... unless CURLOPT_UNRESTRICTED_AUTH is set to allow them. This matches how curl already handles Authorization headers created internally. Note: this changes behavior slightly, for the sake of reducing mistakes. Added test 317 and 318 to verify. Reported-by: Craig de Stigter Bug: https://curl.haxx.se/docs/adv_2018-b3bf.html
* curl: progress bar refresh, get width using ioctl()Daniel Stenberg2018-01-223-21/+95
| | | | | | | | | | | | | Get screen width from the environment variable COLUMNS first, if set. If not, use ioctl(). If nether works, assume 79. Closes #2242 The "refresh" is for the -# output when no total transfer size is known. It will now only use a single updated line even for this case: The "-=O=-" ship moves when data is transferred. The four flying "hashes" move (on a sine wave) on each refresh, independent of data.
* RELEASE-NOTES: synced with bb0ffcc36Daniel Stenberg2018-01-201-8/+38
|
* libcurl-env.3: first takeDaniel Stenberg2018-01-202-1/+90
|
* TODO: two possible name resolver improvementsDaniel Stenberg2018-01-201-0/+21
|
* http2: don't close connection when single transfer is stoppedKartik Mahajan2018-01-181-1/+2
| | | | | Fixes #2237 Closes #2249
* test558: fix for multissl buildsDaniel Stenberg2018-01-181-0/+1
| | | | | | vtls.c:multissl_init() might do a curl_free() call so strip that out to make this work with more builds. We just want to verify that memorytracking works so skipping one line is no harm.
* examples/url2file.c: add missing curl_global_cleanup() callDaniel Stenberg2018-01-181-1/+3
| | | | | Reported-by: XhstormR on github Fixes #2245
* SSH: Fix state machine for ssh-agent authenticationMichael Gmelin2018-01-181-3/+3
| | | | | | | | | | | | | | | | | | | In case an identity didn't match[0], the state machine would fail in state SSH_AUTH_AGENT instead of progressing to the next identity in ssh-agent. As a result, ssh-agent authentication only worked if the identity required happened to be the first added to ssh-agent. This was introduced as part of commit c4eb10e2f06fbd6cc904f1d78e4, which stated that the "else" statement was required to prevent getting stuck in state SSH_AUTH_AGENT. Given the state machine's logic and libssh2's interface I couldn't see how this could happen or reproduce it and I also couldn't find a more detailed description of the problem which would explain a test case to reproduce the problem this was supposed to fix. [0] libssh2_agent_userauth returning LIBSSH2_ERROR_AUTHENTICATION_FAILED Closes #2248
* openssl: fix potential memory leak in SSLKEYLOGFILE logicDaniel Stenberg2018-01-181-9/+12
| | | | Coverity CID 1427646.
* openssl: fix the libressl build againDaniel Stenberg2018-01-181-1/+1
| | | | | | | | | | Follow-up to 84fcaa2e7. libressl does not have the API even if it says it is late OpenSSL version... Fixes #2246 Closes #2247 Reported-by: jungle-boogie on github
* unit1307: test many wildcards tooDaniel Stenberg2018-01-171-1/+5
|
* curl_fnmatch: only allow 5 '*' sections in a single patternDaniel Stenberg2018-01-171-3/+7
| | | | | ... to avoid excessive recursive calls. The number 5 is totally arbitrary and could be modified if someone has a good motivation.
* ftp-wildcard: fix matching an empty string with "*[^a]"Daniel Stenberg2018-01-172-15/+16
| | | | | | | | .... and avoid advancing the pointer to trigger an out of buffer read. Detected by OSS-fuzz Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5251 Assisted-by: Max Dymond
* SMB: fix numeric constant suffix and variable typesDaniel Stenberg2018-01-162-44/+18
| | | | | | | | | | 1. don't use "ULL" suffix since unsupported in older MSVC 2. use curl_off_t instead of custom long long ifdefs 3. make get_posix_time() not do unaligned data access Fixes #2211 Closes #2240 Reported-by: Chester Liu
* CURLOPT_TCP_NODELAY.3: fix typorouzier2018-01-151-1/+1
| | | | Closes #2239
* smtp/pop3/imap_get_message: decrease the data length too...Daniel Stenberg2018-01-153-9/+15
| | | | | | | | Follow-up commit to 615edc1f73 which was incomplete. Assisted-by: Max Dymond Detected by OSS-fuzz Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5206
* openssl: enable SSLKEYLOGFILE support by defaultDaniel Stenberg2018-01-151-4/+6
| | | | | Fixes #2210 Closes #2236
* mime: clone mime tree upon easy handle duplication.Patrick Monnerat2018-01-148-8/+386
| | | | | | | | | | | | | | | | | | | | | A mime tree attached to an easy handle using CURLOPT_MIMEPOST is strongly bound to the handle: there is a pointer to the easy handle in each item of the mime tree and following the parent pointer list of mime items ends in a dummy part stored within the handle. Because of this binding, a mime tree cannot be shared between different easy handles, thus it needs to be cloned upon easy handle duplication. There is no way for the caller to get the duplicated mime tree handle: it is then set to be automatically destroyed upon freeing the new easy handle. New test 654 checks proper mime structure duplication/release. Add a warning note in curl_mime_data_cb() documentation about sharing user data between duplicated handles. Closes #2235
* docs: comment about CURLE_READ_ERROR returned by curl_mime_filedataPatrick Monnerat2018-01-141-2/+5
|
* test395: HTTP with overflow Content-Length valueDaniel Stenberg2018-01-132-1/+56
|