1. 08 Nov, 2010 1 commit
    • Daniel Stenberg's avatar
      CURLOPT_RESOLVE: added · 1b24b89c
      Daniel Stenberg authored
      CURLOPT_RESOLVE is a new option that sends along a curl_slist with
      name:port:address sets that will populate the DNS cache with entries so
      that request can be "fooled" to use another host than what otherwise
      would've been used. Previously we've encouraged the use of Host: for
      that when dealing with HTTP, but this new feature has the added bonus
      that it allows the name from the URL to be used for TLS SNI and server
      certificate name checks as well.
      
      This is a first change. Surely more will follow to make it decent.
      1b24b89c
  2. 25 Aug, 2010 1 commit
  3. 04 Jun, 2010 1 commit
  4. 16 May, 2010 1 commit
  5. 15 May, 2010 1 commit
  6. 12 May, 2010 2 commits
  7. 24 Mar, 2010 1 commit
  8. 10 Feb, 2010 1 commit
  9. 22 Jan, 2010 1 commit
  10. 21 Jan, 2010 3 commits
  11. 01 Jan, 2010 2 commits
  12. 27 Dec, 2009 1 commit
  13. 25 Dec, 2009 1 commit
  14. 12 Dec, 2009 1 commit
  15. 05 Nov, 2009 1 commit
  16. 16 Oct, 2009 1 commit
  17. 27 Sep, 2009 1 commit
    • Daniel Stenberg's avatar
      - I introduced a maximum limit for received HTTP headers. It is controlled by · 8646cecb
      Daniel Stenberg authored
        the define CURL_MAX_HTTP_HEADER which is even exposed in the public header
        file to allow for users to fairly easy rebuild libcurl with a modified
        limit. The rationale for a fixed limit is that libcurl is realloc()ing a
        buffer to be able to put a full header into it, so that it can call the
        header callback with the entire header, but that also risk getting it into
        trouble if a server by mistake or willingly sends a header that is more or
        less without an end. The limit is set to 100K.
      8646cecb
  18. 01 Sep, 2009 1 commit
  19. 31 Aug, 2009 3 commits
  20. 11 Aug, 2009 1 commit
  21. 22 Jul, 2009 1 commit
  22. 10 Jun, 2009 1 commit
    • Yang Tse's avatar
      Adjusted to take in account that... · 2c166812
      Yang Tse authored
      With the curl memory tracking feature decoupled from the debug build feature,
      CURLDEBUG and DEBUGBUILD preprocessor symbol definitions are used as follows:
      
      CURLDEBUG used for curl debug memory tracking specific code (--enable-curldebug)
      
      DEBUGBUILD used for debug enabled specific code (--enable-debug)
      2c166812
  23. 04 Jun, 2009 1 commit
  24. 01 Jun, 2009 1 commit
  25. 30 May, 2009 1 commit
  26. 28 May, 2009 1 commit
  27. 28 Apr, 2009 1 commit
    • Daniel Stenberg's avatar
      - Bug report #2709004 (http://curl.haxx.se/bug/view.cgi?id=2709004) by Tim · e01b7c1e
      Daniel Stenberg authored
        Chen pointed out how curl couldn't upload with resume when reading from a
        pipe.
      
        This ended up with the introduction of a new return code for the
        CURLOPT_SEEKFUNCTION callback that basically says that the seek failed but
        that libcurl may try to resolve the situation anyway. In our case this means
        libcurl will attempt to instead read that much data from the stream instead
        of seeking and that way curl can now upload with resume when data is read
        from a stream!
      e01b7c1e
  28. 09 Apr, 2009 1 commit
  29. 08 Apr, 2009 1 commit
  30. 11 Mar, 2009 1 commit
  31. 02 Mar, 2009 1 commit
    • Daniel Stenberg's avatar
      - David Kierznowski notified us about a security flaw · 042cc1f6
      Daniel Stenberg authored
        (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
        which previous libcurl versions (by design) can be tricked to access an
        arbitrary local/different file instead of a remote one when
        CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
        together this the addition of two new setopt options for controlling this
        new behavior:
      
        o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
        follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
        excludes the FILE and SCP protocols and thus you nee to explicitly allow
        them in your app if you really want that behavior.
      
        o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
        using the primary URL option. This is useful if you want to allow a user or
        other outsiders control what URL to pass to libcurl and yet not allow all
        protocols libcurl may have been built to support.
      curl-7_19_4
      042cc1f6
  32. 17 Feb, 2009 1 commit
    • Daniel Stenberg's avatar
      - CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 in addition to 1 for · 8f81fd6b
      Daniel Stenberg authored
        plain FTP connections, and it will then allow MKD to fail once and retry the
        CWD afterwards. This is especially useful if you're doing many simultanoes
        connections against the same server and they all have this option enabled,
        as then CWD may first fail but then another connection does MKD before this
        connection and thus MKD fails but trying CWD works! The numbers can
        (should?) now be set with the convenience enums now called
        CURLFTP_CREATE_DIR and CURLFTP_CREATE_DIR_RETRY.
      
        Tests has proven that if you're making an application that uploads a set of
        files to an ftp server, you will get a noticable gain in speed if you're
        using multiple connections and this option will be then be very useful.
      8f81fd6b
  33. 11 Feb, 2009 1 commit
  34. 10 Feb, 2009 1 commit