Skip to content
  1. Apr 30, 2009
  2. Apr 29, 2009
  3. Apr 28, 2009
    • Daniel Stenberg's avatar
      - Bug report #2709004 (http://curl.haxx.se/bug/view.cgi?id=2709004) by Tim · e01b7c1e
      Daniel Stenberg authored
        Chen pointed out how curl couldn't upload with resume when reading from a
        pipe.
      
        This ended up with the introduction of a new return code for the
        CURLOPT_SEEKFUNCTION callback that basically says that the seek failed but
        that libcurl may try to resolve the situation anyway. In our case this means
        libcurl will attempt to instead read that much data from the stream instead
        of seeking and that way curl can now upload with resume when data is read
        from a stream!
      e01b7c1e
  4. Apr 27, 2009
  5. Apr 23, 2009
  6. Apr 18, 2009
  7. Apr 17, 2009
  8. Apr 07, 2009
  9. Apr 06, 2009
  10. Mar 20, 2009
  11. Mar 18, 2009
  12. Mar 05, 2009
  13. Mar 03, 2009
  14. Mar 02, 2009
    • Daniel Stenberg's avatar
      - David Kierznowski notified us about a security flaw · 042cc1f6
      Daniel Stenberg authored
        (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
        which previous libcurl versions (by design) can be tricked to access an
        arbitrary local/different file instead of a remote one when
        CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
        together this the addition of two new setopt options for controlling this
        new behavior:
      
        o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
        follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
        excludes the FILE and SCP protocols and thus you nee to explicitly allow
        them in your app if you really want that behavior.
      
        o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
        using the primary URL option. This is useful if you want to allow a user or
        other outsiders control what URL to pass to libcurl and yet not allow all
        protocols libcurl may have been built to support.
      curl-7_19_4
      042cc1f6
    • Daniel Stenberg's avatar
      the Eiffel binding · 4bc603a0
      Daniel Stenberg authored
      4bc603a0
  15. Feb 27, 2009
  16. Feb 23, 2009
  17. Feb 20, 2009
  18. Feb 19, 2009
  19. Feb 17, 2009
    • Daniel Stenberg's avatar
      three new CURLFTP_CREATE_DIR* symbols · 0517fa15
      Daniel Stenberg authored
      0517fa15
    • Daniel Stenberg's avatar
      - CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 in addition to 1 for · 8f81fd6b
      Daniel Stenberg authored
        plain FTP connections, and it will then allow MKD to fail once and retry the
        CWD afterwards. This is especially useful if you're doing many simultanoes
        connections against the same server and they all have this option enabled,
        as then CWD may first fail but then another connection does MKD before this
        connection and thus MKD fails but trying CWD works! The numbers can
        (should?) now be set with the convenience enums now called
        CURLFTP_CREATE_DIR and CURLFTP_CREATE_DIR_RETRY.
      
        Tests has proven that if you're making an application that uploads a set of
        files to an ftp server, you will get a noticable gain in speed if you're
        using multiple connections and this option will be then be very useful.
      8f81fd6b
  20. Feb 13, 2009
  21. Feb 12, 2009
  22. Feb 11, 2009
  23. Feb 10, 2009
  24. Feb 09, 2009
  25. Feb 06, 2009
  26. Feb 04, 2009
  27. Feb 02, 2009
    • Daniel Stenberg's avatar
      - Craig A West brought us: libcurl now defaults to do CONNECT with HTTP · bdd4294e
      Daniel Stenberg authored
        version 1.1 instead of 1.0 like before. This change also introduces the new
        proxy type for libcurl called 'CURLPROXY_HTTP_1_0' that then allows apps to
        switch (back) to CONNECT 1.0 requests. The curl tool also got a --proxy1.0
        option that works exactly like --proxy but sets CURLPROXY_HTTP_1_0.
      
        I updated all test cases cases that use CONNECT and I tried to do some using
        --proxy1.0 and some updated to do CONNECT 1.1 to get both versions run.
      bdd4294e