- 11 Aug, 2017 8 commits
-
-
Thomas Petazzoni authored
The long list of architectures in include/curl/system.h is annoying to maintain, and needs to be extended for each and every architecture to support. Instead, let's rely on the __SIZEOF_LONG__ define of the gcc compiler (we are in the GNUC condition anyway), which tells us if long is 4 bytes or 8 bytes. This fixes the build of libcurl 7.55.0 on architectures such as OpenRISC or ARC. Closes #1766 Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
-
Daniel Stenberg authored
Suspicion: when we enabled the threaded resolver by default.
-
Daniel Stenberg authored
-
Even Rouault authored
Fixes the below leak: $ valgrind --leak-check=full ~/install-curl-git/bin/curl --proxy "http://a:b@/x" http://127.0.0.1 curl: (5) Couldn't resolve proxy name ==5048== ==5048== HEAP SUMMARY: ==5048== in use at exit: 532 bytes in 12 blocks ==5048== total heap usage: 5,288 allocs, 5,276 frees, 445,271 bytes allocated ==5048== ==5048== 2 bytes in 1 blocks are definitely lost in loss record 1 of 12 ==5048== at 0x4C2DB8F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==5048== by 0x4E6CB79: parse_login_details (url.c:5614) ==5048== by 0x4E6BA82: parse_proxy (url.c:5091) ==5048== by 0x4E6C46D: create_conn_helper_init_proxy (url.c:5346) ==5048== by 0x4E6EA18: create_conn (url.c:6498) ==5048== by 0x4E6F9B4: Curl_connect (url.c:6967) ==5048== by 0x4E86D05: multi_runsingle (multi.c:1436) ==5048== by 0x4E88432: curl_multi_perform (multi.c:2160) ==5048== by 0x4E7C515: easy_transfer (easy.c:708) ==5048...
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
A gcc7 warning.
-
David Benjamin authored
Just making the pointer as const works for the pre-1.1.0 path too. Closes #1759
-
- 10 Aug, 2017 10 commits
-
-
Daniel Stenberg authored
To avoid "old crap" unintentionally getting shipped. Bug: https://curl.haxx.se/mail/lib-2017-08/0050.html Reported-by: Christian Weisgerber
-
Jay Satiro authored
- Enable execute permission (chmod +x) - Change interpreter to /usr/bin/env perl Ref: https://github.com/curl/curl/issues/1743
-
Daniel Stenberg authored
Closes #1647
-
Daniel Stenberg authored
Closes #1756
-
Daniel Stenberg authored
-
Daniel Stenberg authored
Fixes #1755
-
Daniel Stenberg authored
Help-by: Jay Satiro Closes #1753
-
Marcel Raad authored
Visual Studio doesn't like LF line endings in solution files and always converts them to CRLF when doing changes to the solution. Notably, this affects the solutions in the release archive. Closes https://github.com/curl/curl/pull/1746
-
Marcel Raad authored
This folder is generated when using the CMake build system from within Visual Studio. Closes https://github.com/curl/curl/pull/1746
-
Jay Satiro authored
Bug: https://github.com/curl/curl/issues/1685 Reported-by:
<paulharris@users.noreply.github.com> Assisted-by: Isaac Boukris Closes https://github.com/curl/curl/pull/1742
-
- 09 Aug, 2017 6 commits
-
-
Adam Sampson authored
These weren't included in the 7.55.0 release, but are required in order to run the full test suite. Closes #1744
-
Adam Sampson authored
The fix for this in 8661a0aacc01492e0436275ff36a21734f2541bb wasn't complete: if the parsed number in num is larger than will fit in a long, the conversion is undefined behaviour (causing test1427 to fail for me on IA32 with GCC 7.1, although it passes on AMD64 and ARMv7). Getting rid of the cast means the comparison will be done using doubles. It might make more sense for the max argument to also be a double... Fixes #1750 Closes #1749
-
Daniel Stenberg authored
-
Daniel Stenberg authored
Broken since d24838d4 Reported-by: Bernard Spil
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
- 08 Aug, 2017 3 commits
-
-
Viktor Szakats authored
Closes #1741
-
Daniel Stenberg authored
... since they now provide several functions as __attribute__((overloadable)), the argument detection logic need updates. Patched-by: destman at github Fixes #1738 Closes #1739
-
Marcel Raad authored
This updates the script to aad5ad5fedb306b39f901a899b7bd305b66c418d from August 01, 2017. Notably, this removes the lconv version whitelist. Closes https://github.com/curl/curl/pull/1716
-
- 07 Aug, 2017 5 commits
-
-
Daniel Stenberg authored
-
Daniel Stenberg authored
Make the number parser aware of the maximum limit curl accepts for a value and return an error immediately if larger, instead of running an integer overflow later. Fixes #1730 Closes #1736
-
Daniel Stenberg authored
Added test 1289 to verify. CVE-2017-1000101 Bug: https://curl.haxx.se/docs/adv_20170809A.html Reported-by: Brian Carpenter
-
Daniel Stenberg authored
... and thereby avoid telling send() to send off more bytes than the size of the buffer! CVE-2017-1000100 Bug: https://curl.haxx.se/docs/adv_20170809B.html Reported-by: Even Rouault Credit to OSS-Fuzz for the discovery
-
Even Rouault authored
Regression brought by 7c312f84 (April 2017) CVE-2017-1000099 Bug: https://curl.haxx.se/docs/adv_20170809C.html Credit to OSS-Fuzz for the discovery
-
- 06 Aug, 2017 1 commit
-
-
Daniel Stenberg authored
First: this function is only used in debug-builds and not in release/real builds. It is used to drive tests using the event-based API. A pointer to the local struct is passed to CURLMOPT_TIMERDATA, but the CURLMOPT_TIMERFUNCTION calback can in fact be called even after this funtion returns, namely when curl_multi_remove_handle() is called. Reported-by: Brian Carpenter
-
- 05 Aug, 2017 1 commit
-
-
Daniel Stenberg authored
Fixes #1728
-
- 04 Aug, 2017 6 commits
-
-
Isaac Boukris authored
When multiple rounds are needed to establish a security context (usually ntlm), we overwrite old token with a new one without free. Found by proposed gss tests using stub a gss implementation (by valgrind error), though I have confirmed the leak with a real gssapi implementation as well. Closes https://github.com/curl/curl/pull/1733
-
Marcel Raad authored
clang complains: vtls/darwinssl.c:40:8: error: extra tokens at end of #endif directive [-Werror,-Wextra-tokens] This breaks the darwinssl build on Travis. Fix it by making this token a comment. Closes https://github.com/curl/curl/pull/1734
-
Marcel Raad authored
When using CURL_WERROR in MSVC builds, the debug flags were overridden by the release flags and /WX got added twice in debug mode. Closes https://github.com/curl/curl/pull/1715
-
Daniel Stenberg authored
-
Daniel Stenberg authored
... by doing two transfers in nocwd mode and check that there's no superfluous CWD command.
-
Daniel Stenberg authored
... when reusing a connection. If it didn't do any CWD previously. Fixes #1718
-