User names embedded in proxy URLs without a password were parsed

  being mangled when passed to proxies when CURLOPT_PORT is also set

  (reported by Pramod Sharma).

- User names embedded in proxy URLs without a password were parsed

  incorrectly--the host name is treated as part of the user name and the

  port number becomes the password.  This can be observed in test 279

  (was KNOWN_ISSUE #54).

Daniel Stenberg (30 Jul 2008)

- Phil Blundell added the CURLOPT_SCOPE option, as well as adjusted the URL

  parser to allow numerical IPv6-addresses to be specified with the scope

 o --use-ascii now works on Symbian OS, MS-DOS and OS/2

 o CURLINFO_SSL_VERIFYRESULT is fixed

 o FTP URLs and IPv6 URLs mangled when sent to proxy with CURLOPT_PORT set

 o a user name in a proxy URL without a password was parsed incorrectly

This release includes the following known bugs:

  library header files exporting symbols/macros that should be kept private

  to the KfW library. See ticket #5601 at http://krbdev.mit.edu/rt/

54. User names embedded in URLs without a password are parsed incorrectly--the

  host name is treated as part of the user name and the port number becomes the

  password.  This can be observed test 279.

53. SFTP busy-loop problem. When doing SFTP uploads, we can see that libcurl

  occasionally will busy-loop while waiting for certain network conditions.

  Reported by Pavel Shalagin, explained somewhat by Daniel Stenberg here:

    proxypasswd[0] = 0;

    if(1 <= sscanf(proxyptr,

                   "%" MAX_CURL_USER_LENGTH_TXT"[^:]:"

                   "%" MAX_CURL_USER_LENGTH_TXT"[^:@]:"

                   "%" MAX_CURL_PASSWORD_LENGTH_TXT "[^@]",

                   proxyuser, proxypasswd)) {

      CURLcode res = CURLE_OK;

HTTP proxy Basic auth

</keywords>

</info>

# Server-side

<reply>

<data>

</strip>

<protocol>

GET http://we.want.that.site.com/279 HTTP/1.1

Proxy-Authorization: Basic ZmFrZUAxMjcuMC4wLjE6ODk5MA0=

Proxy-Authorization: Basic ZmFrZTo=

Host: we.want.that.site.com

Pragma: no-cache

Accept: */*