- I introduced a maximum limit for received HTTP headers. It is controlled by

                                  Changelog

Daniel Stenberg (27 Sep 2009)

- I introduced a maximum limit for received HTTP headers. It is controlled by

  the define CURL_MAX_HTTP_HEADER which is even exposed in the public header

  file to allow for users to fairly easy rebuild libcurl with a modified

  limit. The rationale for a fixed limit is that libcurl is realloc()ing a

  buffer to be able to put a full header into it, so that it can call the

  header callback with the entire header, but that also risk getting it into

  trouble if a server by mistake or willingly sends a header that is more or

  less without an end. The limit is set to 100K.

Daniel Stenberg (26 Sep 2009)

- John P. McCaskey posted a bug report that showed how libcurl did wrong when

  saving received cookies with no given path, if the path in the request had a

 o -T. is now for non-blocking uploading from stdin

 o SYST handling on FTP for OS/400 FTP server cases

 o libcurl refuses to read a single HTTP header longer than 100K

This release includes the following bugfixes:

     time for those who feel adventurous. */

#define CURL_MAX_WRITE_SIZE 16384

#endif

#ifndef CURL_MAX_HTTP_HEADER

/* The only reason to have a max limit for this is to avoid the risk of a bad

   server feeding libcurl with a never-ending header that will cause reallocs

   infinitely */

#define CURL_MAX_HTTP_HEADER (100*1024)

#endif

/* This is a magic return code for the write callback that, when returned,

   will signal libcurl to pause receiving on the current transfer. */

#define CURL_WRITEFUNC_PAUSE 0x10000001

    /* We enlarge the header buffer as it is too small */

    char *newbuff;

    size_t hbufp_index;

    size_t newsize=CURLMAX((k->hbuflen+ length)*3/2,

                           data->state.headersize*2);

    size_t newsize;

    if(k->hbuflen + length > CURL_MAX_HTTP_HEADER) {

      /* The reason to have a max limit for this is to avoid the risk of a bad

         server feeding libcurl with a never-ending header that will cause

         reallocs infinitely */

      failf (data, "Avoided giant realloc for header (max is %d)!",

             CURL_MAX_HTTP_HEADER);

      return CURLE_OUT_OF_MEMORY;

    }

    newsize=CURLMAX((k->hbuflen+ length)*3/2, data->state.headersize*2);

    hbufp_index = k->hbufp - data->state.headerbuff;

    newbuff = realloc(data->state.headerbuff, newsize);

    if(!newbuff) {