- 06 May, 2019 1 commit
-
-
Daniel Stenberg authored
Closes #3846
-
- 05 May, 2019 4 commits
-
-
Steve Holme authored
-
Steve Holme authored
Closes #3838
-
Daniel Stenberg authored
The zoneid can be used with IPv6 numerical addresses. Updated test 1560 to verify. Closes #3834
-
Taiyu Len authored
Closes #3837
-
- 04 May, 2019 1 commit
-
-
Daniel Stenberg authored
-
- 03 May, 2019 5 commits
-
-
Daniel Stenberg authored
Reported-by: Ricardo Gomes Bug: #3537 Closes #3836
-
Daniel Stenberg authored
The time field in the curl_fileinfo struct will always be zero. No code was ever implemented to actually convert the date string to a time_t. Fixes #3829 Closes #3835
-
Daniel Stenberg authored
-
Daniel Stenberg authored
(and make the code style comply) Fixes #3833
-
Daniel Stenberg authored
... to make the host name "usable". Store the scope id and put it back when extracting a URL out of it. Also makes curl_url_set() syntax check CURLUPART_HOST. Fixes #3817 Closes #3822
-
- 02 May, 2019 2 commits
-
-
Daniel Stenberg authored
-
Daniel Stenberg authored
... for functions related to pipelining. Those functions were removed in 2f44e94e. Closes #3828
-
- 01 May, 2019 7 commits
-
-
Yiming Jing authored
... due to SHA-1 signatures in test certs
-
Yiming Jing authored
Closes #3823 Closes #3776
-
Daniel Stenberg authored
- better log output - make sure multiplex is enabled for it to be used
-
Daniel Stenberg authored
As soon as a TLS backend gets ALPN conformation about the specific HTTP version it can now set the multiplex situation for the "bundle" and trigger moving potentially queued up transfers to the CONNECT state.
-
Daniel Stenberg authored
With transfers being queued up, we only move one at a a time back to the CONNECT state but now we mark moved transfers so that when a moved transfer is confirmed "successful" (it connected) it will trigger the move of another pending transfer. Previously, it would otherwise wait until the transfer was done before doing this. This makes queued up pending transfers get processed (much) faster.
-
Daniel Stenberg authored
Fixes #3813 Closes #3815
-
Daniel Gustafsson authored
In case the name pointer isn't set (due to memory pressure most likely) we need to skip the prefix matching and reject with a badcookie to avoid a possible NULL pointer dereference. Closes #3820 #3821 Reported-by: Jonathan Moerman Reviewed-by:
Daniel Stenberg <daniel@haxx.se>
-
- 30 Apr, 2019 1 commit
-
-
Patrick Monnerat authored
-
- 29 Apr, 2019 3 commits
-
-
Kamil Dudka authored
Closes #3808
-
Reed Loden authored
Closes #3811
-
Daniel Stenberg authored
This limits all accepted input strings passed to libcurl to be less than CURL_MAX_INPUT_LENGTH (8000000) bytes, for these API calls: curl_easy_setopt() and curl_url_set(). The 8000000 number is arbitrary picked and is meant to detect mistakes or abuse, not to limit actual practical use cases. By limiting the acceptable string lengths we also reduce the risk of integer overflows all over. NOTE: This does not apply to `CURLOPT_POSTFIELDS`. Test 1559 verifies. Closes #3805
-
- 28 Apr, 2019 1 commit
-
-
Tseng Jun authored
Closes #3809
-
- 27 Apr, 2019 1 commit
-
-
Simon Warta authored
Closes https://github.com/curl/curl/pull/3769
-
- 23 Apr, 2019 5 commits
-
-
Steve Holme authored
-
Steve Holme authored
Just like we do for mbed TLS, use our local implementation of MD4 when OpenSSL doesn't support it. This allows a type-3 message to include the NT response.
-
Daniel Gustafsson authored
Kerberos was incorrectly indented as a subsection under FTP, which is incorrect as they are both top level sections. A fix for this was first attempted in commit fef38a08 but that was a few paddles short of being complete.
-
Aron Bergman authored
Add the subsections under "Structs in libcurl" to the table of contents. Reviewed-by:
Daniel Stenberg <daniel@haxx.se> Reviewed-by:
Daniel Gustafsson <daniel@yesql.se>
-
Aron Bergman authored
Make all struct members under the Curl_handler section print in monospace font. Closes #3801 Reviewed-by:
Daniel Stenberg <daniel@haxx.se> Reviewed-by:
Daniel Gustafsson <daniel@yesql.se>
-
- 22 Apr, 2019 3 commits
-
-
Daniel Stenberg authored
Introducing the curl bug bounty program on hackerone. We now recommend filing security issues directly in the hackerone ticket system which only is readable to curl security team members. Assisted-by: Daniel Gustafsson Closes #3488
-
Steve Holme authored
RFC 4616 specifies the authzid is optional in the client authentication message and that the server will derive the authorisation identity (authzid) from the authentication identity (authcid) when not specified by the client.
-
Gisle Vanem authored
Follow-up to 76b63489 which renamed logfile as curl_dbg_logfile. Ref: https://github.com/curl/curl/commit/76b6348#r33259088
-
- 21 Apr, 2019 4 commits
-
-
Steve Holme authored
Follow up to 762a292f.
-
Daniel Stenberg authored
-
Daniel Stenberg authored
-
Daniel Stenberg authored
... and disconnect too old ones instead of trying to reuse. Default max age is set to 118 seconds. Ref: #3722 Closes #3782
-
- 20 Apr, 2019 2 commits
-
-
Po-Chuan Hsieh authored
ALTSVC requires Curl_get_line which is defined in lib/cookie.c inside a #if check of HTTP and COOKIES. That makes Curl_get_line undefined if COOKIES is disabled. Fix by splitting out the function into a separate file which can be included where needed. Closes #3717 Reviewed-by:
Daniel Gustafsson <daniel@yesql.se> Reviewed-by:
Marcel Raad <Marcel.Raad@teamviewer.com>
-
Daniel Stenberg authored
-