- 30 Apr, 2018 1 commit
-
-
Daniel Stenberg authored
It seems to not be detected by default anymore (which is a bug I believe) Closes #2541
-
- 29 Apr, 2018 3 commits
-
-
Daniel Stenberg authored
Closes #2299
-
Daniel Stenberg authored
Closes #2252
-
Daniel Stenberg authored
... and make test 1026 rely on that feature so that --disable-manual builds don't cause test failures. Reported-by: Max Dymond and Anders Roxell Fixes #2533 Closes #2540
-
- 27 Apr, 2018 2 commits
-
-
Daniel Stenberg authored
-
Daniel Gustafsson authored
Commit 2bc230de made the macro MAX_COOKIE_LINE_TXT become unused, so remove as it's not part of the published API. Closes https://github.com/curl/curl/pull/2537
-
- 26 Apr, 2018 5 commits
-
-
Daniel Gustafsson authored
This extends the INDENTATION case to also handle 'else' statements and require proper indentation on the following line. Also fixes the offending cases found in the codebase. Closes #2532
-
Daniel Stenberg authored
This function can get called on a connection that isn't setup enough to have the 'recv_underlying' function pointer initialized so it would try to call the NULL pointer. Reported-by: Dario Weisser Follow-up to db1b2c7f (never shipped in a release) Closes #2536
-
Daniel Stenberg authored
Follow-up to 1514c446: replace another strstr() call done on a buffer that might not be zero terminated - with a memchr() call, even if we know the substring will be found. Assisted-by: Max Dymond Detected by OSS-Fuzz Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8021 Closes #2534
-
Daniel Stenberg authored
WolfSSL doesn't enable it by default anymore
-
Daniel Stenberg authored
-
- 25 Apr, 2018 4 commits
-
-
Daniel Stenberg authored
-
Daniel Gustafsson authored
All occurrences of assignment within conditional expression in os400sys.c rewritten into two steps: first assignment and then the check on the success of the assignment. Also adjust related incorrect brace positions to match project indentation style. This was spurred by seeing "if((inp = input_token))", but while in there all warnings were fixed. There should be no functional change from these changes. Closes #2525
-
Daniel Gustafsson authored
The jar should be written iff there are cookies, so ensure that we still have cookies after expiration to avoid creating an empty file. Closes #2529
-
Daniel Stenberg authored
OSS-Fuzz detected https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8000 Broke in dd7521bc
-
- 24 Apr, 2018 7 commits
-
-
Daniel Stenberg authored
Coverity detected, CID 1435120 Closes #2527
-
Stephan Mühlstrasser authored
With commit 4272a0b0 curl-speficic character classification macros and functions were introduced in curl_ctype.[ch] to avoid dependencies on the locale. This broke curl on non-ASCII, e.g. EBCDIC platforms. This change restores the previous set of character classification macros when CURL_DOES_CONVERSIONS is defined. Closes #2494
-
Daniel Stenberg authored
Fixes FTP wildcard parsing when done over a number of read buffers. Regression from f786d1f1 Reported-by: wncboy on github Fixes #2445 Closes #2526
-
Daniel Stenberg authored
http2-upload.c:135:44: error: ‘%02d’ directive output may be truncated writing between 2 and 11 bytes into a region of size between 8 and 17
-
Daniel Stenberg authored
/docs/examples/sftpuploadresume.c:102:12: warning: conversion to 'long int' from 'curl_off_t {aka long long int}' may alter its value
-
Daniel Stenberg authored
This reverts commit abbc8457. Caused fuzzer problems on travis not seen when this was a PR!
-
Daniel Stenberg authored
Avoids undefined behavior. Reported-by: Geeknik Labs
-
- 23 Apr, 2018 9 commits
-
-
Daniel Stenberg authored
Fixes FTP wildcard parsing when doing over a number of read buffers. Regression from f786d1f1 Reported-by: wncboy on github Fixes #2445 Closes #2519
-
Daniel Stenberg authored
... to make them better spell out what they're for.
-
Daniel Stenberg authored
-
Christian Schmitz authored
Closes #2499
-
Daniel Stenberg authored
Fuzzing has proven we can reach code in on_frame_recv with status_code not having been set, so let's detect that in run-time (instead of with assert) and error error accordingly. (This should no longer happen with the latest nghttp2) Detected by OSS-Fuzz Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7903 Closes #2514
-
Daniel Stenberg authored
Fixes #2515 Closes #2517
-
Archangel_SDY authored
- Use CRYPT_STRING_HEX instead of CRYPT_STRING_HEXRAW since XP doesn't support the latter. Ref: https://github.com/curl/curl/pull/2376#issuecomment-382153668 Closes https://github.com/curl/curl/pull/2504
-
Daniel Stenberg authored
This reverts commit 8fb78f9d. Unfortunately this fix introduces memory leaks I've not been able to fix in several days. Reverting this for now to get the leaks fixed.
-
- 21 Apr, 2018 1 commit
-
-
Jay Satiro authored
Before: -m, --max-time <time> Maximum time allowed for the transfer After: -m, --max-time <seconds> Maximum time allowed for the transfer
-
- 20 Apr, 2018 5 commits
-
-
Daniel Stenberg authored
When receiving REFUSED_STREAM, mark the connection for close and retry streams accordingly on another/fresh connection. Reported-by: Terry Wu Fixes #2416 Fixes #1618 Closes #2510
-
Daniel Stenberg authored
This fixes the notorious "httpc->drain_total >= data->state.drain" assert. Reported-by: Anders Bakken Fixes #1680 Closes #2509
-
Daniel Stenberg authored
It's not strictly clear if the API contract allows us to call strstr() on a string that isn't zero terminated even when we know it will find the substring, and clang's ASAN check dislikes us for it. Also added a check of the return code in case it fails, even if I can't think of a situation how that can trigger. Detected by OSS-Fuzz Closes #2513 Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7760
-
Stephan Mühlstrasser authored
Curl_cert_hostcheck operates with the host character set, therefore the ASCII subjectAltName string retrieved with OpenSSL must be converted to the host encoding before comparison. Closes #2493
-
Jay Satiro authored
- Support handling verbose-mode trace messages of type SSL3_RT_INNER_CONTENT_TYPE, SSL3_MT_ENCRYPTED_EXTENSIONS, SSL3_MT_END_OF_EARLY_DATA, SSL3_MT_KEY_UPDATE, SSL3_MT_NEXT_PROTO, SSL3_MT_MESSAGE_HASH Reported-by:
<iz8mbw@users.noreply.github.com> Fixes https://github.com/curl/curl/issues/2403
-
- 19 Apr, 2018 3 commits
-
-
Daniel Stenberg authored
Regression from f786d1f1 Reported-by: wncboy on github Fixes #2445 Closes #2508
-
Daniel Stenberg authored
-
Daniel Stenberg authored
This triggered an assert if called more than once in debug mode (and a memory leak if not debug build). With the right sequence of HTTP/2 headers incoming it can happen. Detected by OSS-Fuzz Closes #2507 Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7764
-