Skip to content
Snippets Groups Projects
  1. Apr 13, 2009
    • Daniel Stenberg's avatar
      - bug report #2727981 (http://curl.haxx.se/bug/view.cgi?id=2727981) by Martin · 379bfa5a
      Daniel Stenberg authored
        Storsjo pointed out how setting CURLOPT_NOBODY to 0 could be downright
        confusing as it set the method to either GET or HEAD. The example he showed
        looked like:
      
         curl_easy_setopt(curl, CURLOPT_PUT, 1);
         curl_easy_setopt(curl, CURLOPT_NOBODY, 0);
      
        The new way doesn't alter the method until the request is about to start. If
        CURLOPT_NOBODY is then 1 the HTTP request will be HEAD. If CURLOPT_NOBODY is
        0 and the request happens to have been set to HEAD, it will then instead be
        set to GET. I believe this will be less surprising to users, and hopefully
        not hit any existing users badly.
      379bfa5a
  2. Mar 03, 2009
  3. Mar 02, 2009
    • Daniel Stenberg's avatar
      - David Kierznowski notified us about a security flaw · 042cc1f6
      Daniel Stenberg authored
        (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
        which previous libcurl versions (by design) can be tricked to access an
        arbitrary local/different file instead of a remote one when
        CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
        together this the addition of two new setopt options for controlling this
        new behavior:
      
        o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
        follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
        excludes the FILE and SCP protocols and thus you nee to explicitly allow
        them in your app if you really want that behavior.
      
        o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
        using the primary URL option. This is useful if you want to allow a user or
        other outsiders control what URL to pass to libcurl and yet not allow all
        protocols libcurl may have been built to support.
      curl-7_19_4
      042cc1f6
  4. Feb 28, 2009
  5. Feb 17, 2009
    • Daniel Stenberg's avatar
      - CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 in addition to 1 for · 8f81fd6b
      Daniel Stenberg authored
        plain FTP connections, and it will then allow MKD to fail once and retry the
        CWD afterwards. This is especially useful if you're doing many simultanoes
        connections against the same server and they all have this option enabled,
        as then CWD may first fail but then another connection does MKD before this
        connection and thus MKD fails but trying CWD works! The numbers can
        (should?) now be set with the convenience enums now called
        CURLFTP_CREATE_DIR and CURLFTP_CREATE_DIR_RETRY.
      
        Tests has proven that if you're making an application that uploads a set of
        files to an ftp server, you will get a noticable gain in speed if you're
        using multiple connections and this option will be then be very useful.
      8f81fd6b
  6. Feb 07, 2009
  7. Feb 02, 2009
    • Daniel Stenberg's avatar
      - Patrick Scott found a rather large memory leak when using the multi · d4ac3d53
      Daniel Stenberg authored
        interface and setting CURLMOPT_MAXCONNECTS to something less than the number
        of handles you add to the multi handle. All the connections that didn't fit
        in the cache would not be properly disconnected nor freed!
      d4ac3d53
    • Daniel Stenberg's avatar
      - Craig A West brought us: libcurl now defaults to do CONNECT with HTTP · bdd4294e
      Daniel Stenberg authored
        version 1.1 instead of 1.0 like before. This change also introduces the new
        proxy type for libcurl called 'CURLPROXY_HTTP_1_0' that then allows apps to
        switch (back) to CONNECT 1.0 requests. The curl tool also got a --proxy1.0
        option that works exactly like --proxy but sets CURLPROXY_HTTP_1_0.
      
        I updated all test cases cases that use CONNECT and I tried to do some using
        --proxy1.0 and some updated to do CONNECT 1.1 to get both versions run.
      bdd4294e
  8. Jan 28, 2009
  9. Jan 26, 2009
  10. Jan 25, 2009
  11. Jan 21, 2009
    • Dan Fandrich's avatar
      Fixed a couple more locale-dependent toupper conversions, mainly for · 55915501
      Dan Fandrich authored
      clarity.  This does fix one problem that causes ;type=i FTP URLs
      to fail in the Turkish locale when CURLOPT_PROXY_TRANSFER_MODE is
      used (test case 561)
      
      Added tests 561 and 1092 through 1094 to test various combinations
      of ;type= and ;mode= URLs that could potentially fail in the Turkish
      locale.
      55915501
  12. Jan 08, 2009
  13. Dec 29, 2008
  14. Dec 19, 2008
  15. Dec 12, 2008
  16. Dec 11, 2008
  17. Dec 10, 2008
    • Daniel Stenberg's avatar
      - Internet Explorer had a broken HTTP digest authentication before v7 and · 6e376532
      Daniel Stenberg authored
        there are servers "out there" that relies on the client doing this broken
        Digest authentication. Apache even comes with an option to work with such
        broken clients.
      
        The difference is only for URLs that contain a query-part (a '?'-letter and
        text to the right of it).
      
        libcurl now supports this quirk, and you enable it by setting the
        CURLAUTH_DIGEST_IE bit in the bitmask you pass to the CURLOPT_HTTPAUTH or
        CURLOPT_PROXYAUTH options. They are thus individually controlled to server
        and proxy.
      6e376532
  18. Dec 03, 2008
  19. Nov 19, 2008
    • Daniel Stenberg's avatar
      - Andreas Wurf and Markus Koetter helped me analyze a problem that Andreas got · 797bc850
      Daniel Stenberg authored
        when uploading files to a single FTP server using multiple easy handle
        handles with the multi interface. Occasionally a handle would stall in
        mysterious ways.
      
        The problem turned out to be a side-effect of the ConnectionExists()
        function's eagerness to re-use a handle for HTTP pipelining so it would
        select it even if already being in use, due to an inadequate check for its
        chances of being used for pipelnining.
      797bc850
  20. Nov 05, 2008
  21. Nov 03, 2008
  22. Oct 23, 2008
  23. Oct 19, 2008
  24. Oct 17, 2008
  25. Oct 16, 2008
  26. Oct 15, 2008
    • Daniel Stenberg's avatar
      - Pascal Terjan filed bug #2154627 · a579d670
      Daniel Stenberg authored
        (http://curl.haxx.se/bug/view.cgi?id=2154627) which pointed out that libcurl
        uses strcasecmp() in multiple places where it causes failures when the
        Turkish locale is used. This is because 'i' and 'I' isn't the same letter so
        strcasecmp() on those letters are different in Turkish than in English (or
        just about all other languages). I thus introduced a totally new internal
        function in libcurl (called Curl_ascii_equal) for doing case insentive
        comparisons for english-(ascii?) style strings that thus will make "file"
        and "FILE" match even if the Turkish locale is selected.
      a579d670
  27. Oct 14, 2008
  28. Oct 10, 2008
  29. Oct 08, 2008
Loading