- Feb 06, 2013
-
-
Daniel Stenberg authored
We don't need them and I doubt many people used them. We also don't have any configs for other editors and we wouldn't want that.
-
Steve Holme authored
To help maintain the readability of the code in imap.c, pop3.c and smtp.c moved the starttls code into state_starttls() functions.
-
Nick Zitzmann authored
Added IDN and HTTP data compression as they were left out of the document until now. Added notes for qssl, schannel and Secure Transport supporting SSLv2, Secure Transport supports NTLM, and axTLS does not support SSLv3. There was also a typo; "AUTH TSL" should be "AUTH TLS".
-
Kamil Dudka authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
Eldar Zaitov authored
When negotiating SASL DIGEST-MD5 authentication, the function Curl_sasl_create_digest_md5_message() uses the data provided from the server without doing the proper length checks and that data is then appended to a local fixed-size buffer on the stack. This vulnerability can be exploited by someone who is in control of a server that a libcurl based program is accessing with POP3, SMTP or IMAP. For applications that accept user provided URLs, it is also thinkable that a malicious user would feed an application with a URL to a server hosting code targetting this flaw. Bug: http://curl.haxx.se/docs/adv_20130206.html
-
Steve Holme authored
Removed whitespace introduced in commit 5f8f20f5 that caused formatting issues when generating the website docs.
-
Yang Tse authored
- rename post-config-vms.h to setup-vms.h - move its inclusion into proper location in curl_setup.h
-
Yang Tse authored
- remove multiple declarations of vms_show and add comments
-
Yang Tse authored
- remove header inclusion already done in curl_setup_once.h
-
Steve Holme authored
-
Steve Holme authored
-
Steve Holme authored
Added SMTP, SMTPS, POP3, POP3S, IMAP and IMAPS features.
-
- Feb 05, 2013
-
-
Steve Holme authored
Corrected comment clarification made in commit 167717b8.
-
Steve Holme authored
-
Daniel Stenberg authored
8 more bug fixes mentioned
-
John E. Malmberg authored
config_h.com is a new file that generates a config.h file based on the curl_config.h.in file and a quick scan of the configure script. This is actually a generic procedure that is shared with other VMS packages. The existing pre-built config-vms.h had over 100 entries that were not correct and in some cases conflicted with the build options available in the build_vms.com. generate_config_vms_h_curl.com is a helper procedure to the config_h.com. It covers the cases that the generic config_h.com is not able to figure out, and accepts input from the build_vms.com procedure. build_curlbuild_h.com is a new file to generate the curlbuild.h file that Curl is now using when it is using a curl_config.h file. post-config-vms.h is a new file that is needed to provide VMS specific definitions, and most of them need to be set before the system header files are included. The VMS build procedure is fixed: 1. Fixed to link in the correct HP ssl library. 2. Fixed to...
-
Daniel Stenberg authored
By doing this unconditionally, we infer a simpler and more defined behavior. This also has the upside that test 1021 no longer fails for me even if I run with valgrind. Also fixed some wrong comments.
-
Steve Holme authored
Tidied up the comments in the endofresp() functions to be more meaningful prior to release.
-
Marc Hoersken authored
According KB975858 this flag may cause problems on Windows 7 and Windows Server 2008 R2 systems. Extended error information is not currently used by libcurl and therefore not a requirement. The flag may improve the SSL-connection shutdown in case of an error. This means it might be a good improvement in the future. Fixes bug/issue #1187 - thanks for the report
-
Tor Arntsen authored
The 56b7c87c change left a case where a good sockfd was not copied to *sockp before returning with CURLE_OK
-
Daniel Stenberg authored
pointed out by clang-analyzer
-
Daniel Stenberg authored
pointed out by clang-analyzer
-
Linus Nielsen authored
When a connection is no longer used, it is kept in the cache. If the cache is full, the oldest idle connection is closed. If no connection is idle, the current one is closed instead.
-
Steve Holme authored
Added recent additions and fixes following the changes to imap, pop3 and smtp. Additionally added another contributor that helped to test the imap sasl changes.
-
- Feb 04, 2013
-
-
Steve Holme authored
Provided additional clarification about the logic of the authenticate() functions following commit 6b6bdc83 and b4270a9a.
-
Andrei Kurushin authored
Bug: http://curl.haxx.se/bug/view.cgi?id=1186
-
Daniel Stenberg authored
Rich Gray provided good feedback and we now clarify that you can in fact stop a multi transfer at any point you like by removing the easy handle.
-
Matt Arsenault authored
-
Sergei Nikulov authored
-
Steve Holme authored
Tidied up code from commit 6b6bdc83bdUpdated where a few instances of the pop3c struct variable used the longer conndata struct rather than matching what other code in pop3_authenticate() used.
-
Guenter Knauf authored
-
Guenter Knauf authored
-
- Feb 03, 2013
-
-
Steve Holme authored
Fixed an issue where (lib)curl is compiled without support for a supported challenge-response based SASL authentication mechanism, such as CRAM-MD5 or NTLM, the server doesn't support the LOGIN or PLAIN mechanisms and (lib)curl doesn't fallback to Clear Text authentication. Note: In order to fallback to Clear Text authentication properly this fix adds support for the LOGINDISABLED server capability. imap: Fixed no known authentication mechanism when fallback is required Fixed an issue where (lib)curl is compiled without support for a supported challenge-response based SASL authentication mechanism, such as CRAM-MD5 or NTLM, the server doesn't support the LOGIN or PLAIN mechanisms and (lib)curl doesn't fallback to Clear Text authentication. Note: In order to fallback to Clear Text authentication properly this fix adds support for the LOGINDISABLED server capability. Related bug: http://curl.haxx.se/mail/lib-2013-02/0004.html Reported by: Stanislav Ivochkin
-
Steve Holme authored
Fixed an issue where (lib)curl is compiled without support for a supported challenge-response based SASL authentication mechanism, such as CRAM-MD5 or NTLM, the server doesn't support the LOGIN or PLAIN mechanisms and (lib)curl doesn't fallback to APOP or Clear Text authentication. Bug: http://curl.haxx.se/mail/lib-2013-02/0004.html Reported by: Stanislav Ivochkin
-
- Feb 01, 2013
-
-
Daniel Stenberg authored
Remove timeout argument that's never used. Make the actual connection get detected on a single spot to reduce code duplication. Store the IPv6 state already when the connection is attempted.
-
Daniel Stenberg authored
Curl_perfom is no longer used anywhere since the always-multi commit c4312741, and some related functions were used only from within Curl_perfom.
-