1. 11 May, 2009 5 commits
  2. 08 May, 2009 1 commit
  3. 07 May, 2009 1 commit
  4. 04 May, 2009 3 commits
  5. 03 May, 2009 1 commit
  6. 01 May, 2009 1 commit
  7. 30 Apr, 2009 3 commits
  8. 29 Apr, 2009 1 commit
  9. 28 Apr, 2009 1 commit
    • Daniel Stenberg's avatar
      - Bug report #2709004 (http://curl.haxx.se/bug/view.cgi?id=2709004) by Tim · e01b7c1e
      Daniel Stenberg authored
        Chen pointed out how curl couldn't upload with resume when reading from a
        pipe.
      
        This ended up with the introduction of a new return code for the
        CURLOPT_SEEKFUNCTION callback that basically says that the seek failed but
        that libcurl may try to resolve the situation anyway. In our case this means
        libcurl will attempt to instead read that much data from the stream instead
        of seeking and that way curl can now upload with resume when data is read
        from a stream!
      e01b7c1e
  10. 27 Apr, 2009 1 commit
  11. 23 Apr, 2009 2 commits
  12. 18 Apr, 2009 3 commits
  13. 17 Apr, 2009 1 commit
  14. 07 Apr, 2009 1 commit
  15. 06 Apr, 2009 1 commit
  16. 20 Mar, 2009 1 commit
  17. 18 Mar, 2009 2 commits
  18. 05 Mar, 2009 1 commit
  19. 03 Mar, 2009 1 commit
  20. 02 Mar, 2009 2 commits
    • Daniel Stenberg's avatar
      - David Kierznowski notified us about a security flaw · 042cc1f6
      Daniel Stenberg authored
        (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
        which previous libcurl versions (by design) can be tricked to access an
        arbitrary local/different file instead of a remote one when
        CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
        together this the addition of two new setopt options for controlling this
        new behavior:
      
        o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
        follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
        excludes the FILE and SCP protocols and thus you nee to explicitly allow
        them in your app if you really want that behavior.
      
        o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
        using the primary URL option. This is useful if you want to allow a user or
        other outsiders control what URL to pass to libcurl and yet not allow all
        protocols libcurl may have been built to support.
      curl-7_19_4
      042cc1f6
    • Daniel Stenberg's avatar
      the Eiffel binding · 4bc603a0
      Daniel Stenberg authored
      4bc603a0
  21. 27 Feb, 2009 1 commit
  22. 23 Feb, 2009 4 commits
  23. 20 Feb, 2009 1 commit
  24. 19 Feb, 2009 1 commit