_ _ ____ _ ___| | | | _ \| | / __| | | | |_) | | | (__| |_| | _ <| |___ \___|\___/|_| \_\_____| Changelog Daniel (6 October 2004) - Chih-Chung Chang reported that if you use CURLOPT_RESUME_FROM and enabled CURLOPT_FOLLOWLOCATION, libcurl reported error if a redirect happened even if the new URL would provide the resumed file. Test case 188 added to verify the fix (together with existing test 99). - Dan Fandrich fixed a configure flaw for systems that need both nsl and socket libs to use gethostbyname(). - Removed tabs and trailing whitespace from lots of source files. Daniel (5 October 2004) - Made configure --with-libidn=PATH try the given PATH before the default paths to make it possible to override. - If idna_strerror() is present in libidn, we can use that instead of our internal replacement. This function was added by Simon in libidn 0.5.6 and is detected by configure. - It seems basename() on IRIX is in the libgen library and since we don't use that, configure finds libgen.h but not basename and then we get a compiler error because our basename() replacement doesn't match the proto in libgen.h. Starting now, we don't include the file if basename wasn't found as well. Daniel (4 October 2004) - Chris found a race condition resulting in CURLE_COULDNT_RESOLVE_HOST and potential crash, in the windows threaded name resolver code. Daniel (3 October 2004) - Replaced the use of isspace() in cookie.c with our own version instead since we have most data as 'char *' and that makes us pass in negative values if there is 8bit data in the string. Changing to unsigned causes too much warnings or too many required typecasts to the normal string functions. Harshal Pradhan identified this problem. Daniel (2 October 2004) - Bertrand Demiddelaer found a case where libcurl could read already freed data when CURLOPT_VERBOSE is used and a (very) persistent connection. It happened when the dns cache entry for the connection was pruned while the connection was still alive and then again re-used. We worked together on this fix. - Gisle Vanem provided code that displays an error message when the (libidn based) IDN conversion fails. This is really due to a missing suitable function in the libidn API that I hope we can remove once libidn gets a function like this. Daniel (1 October 2004) - Aleksandar Milivojevic reported a problem in the Redhat bugzilla (see https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134133) and not to anyone involved in the curl project! This happens when you try to curl a file from a proftpd site using SSL. It seems proftpd sends a somewhat unorthodox response code (232 instead of 230). I relaxed the response code check to deal with this and similar cases. - Based on Fedor Karpelevitch's formpost path basename patch, file parts in formposts no longer include the path part. If you _really_ want them, you must provide your preferred full file name with CURLFORM_FILENAME. Added detection for libgen.h and basename() to configure. My custom basename() replacement function for systems without it, might be a bit too naive... Updated 6 test cases to make them work with the stripped paths. Daniel (30 September 2004) - Larry Campbell added CURLINFO_OS_ERRNO to curl_easy_getinfo() that allows an app to retrieve the errno variable after a (connect) failure. It will make sense to provide this for more failures in a more generic way, but let's start like this. - Günter Knauf and Casey O'Donnell worked out an extra #if condition for the curl/multi.h header to work better in winsock-using apps. - Jean-Philippe Barrette-LaPierre made buildconf run better on Mac OS X by properly using glibtoolize instead of plain libtoolize. (This is made if glibtool was found and used instead of plain libtool.) Daniel (29 September 2004) - Bertrand Demiddelaer fixed curl_easy_reset() so that it doesn't mistakingly enable the progress meter. Daniel (28 September 2004) - "Mekonikum" found out that if you built curl without SSL support, although your current SSL installation supports Engine, the compile fails. Daniel (27 September 2004) - When --with-ssl=PATH is used to the configure script, it no longer uses pkg-config to figure out extra details. That is now only done if no PATH is included or if SSL is checked for by default without the --with-ssl option. Daniel (25 September 2004) - Peter Sylvester pointed out that CURLOPT_SSLENGINE couldn't even be set to NULL when no engine was supported. It can now. Daniel (22 September 2004) - Dan Fandrich fixed three test cases to no longer use "localhost" but instead use "127.0.0.1" to avoid requiring that localhost resolves nicely. - Jean-Claude Chauve fixed an LDAP crash when more than one record was retrieved. Daniel (19 September 2004) - Andreas Rieke pointed out that when attempting to connect to a host without a service on the specified port, curl_easy_perform() didn't properly provide an error message in the CURLOPT_ERRORBUFFER buffer. Daniel (16 September 2004) - Daniel at touchtunes uses the FTP+SSL server "BSDFTPD-SSL from http://bsdftpd-ssl.sc.ru/" which accordingly doesn't properly work with curl when "AUTH SSL" is issued (although the server responds fine and everything) but requires that curl issues "AUTH TLS" instead. See http://curl.haxx.se/feedback/display.cgi?id=10951944937603&support=yes Introducing CURLOPT_FTPSSLAUTH that allows the application to select which of the AUTH strings to attempt first. - Anonymous filed bug report #1029478 which identified a bug when you 1) used a URL without properly seperating the host name and the parameters with a slash. 2) the URL had parameters to the right of a ? that contains a slash 3) curl was told to follow Location:s 4) the request got a response that contained a Location: to redirect to "/dir". curl then appended the new path on the wrong position of the original URL. Test case 187 was added to verify that this was fixed properly. Daniel (11 September 2004) - Added parsedate.c that contains a rewrite of the date parser currently provided by getdate.y. The new one is MUCH smaller and will allow us to run away from the yacc/bison jungle. It is also slightly lacking in features compared to the old one, but it supports parsing of all date formats HTTP involves (and a fair bunch of others). Daniel (10 September 2004) - As found out by Jonas Forsman, curl didn't allow -F to set Content-Type on text-parts. Starting now, we can do -F "name=daniel;type=text/extra". Added test case 186 to verify. - Bug report #1025986. When following a Location: with a custom Host: header replacement, curl only replaced the Host: header on the initial request and didn't replace it on the following ones. This resulted in requests with two Host: headers. Now, curl checks if the location is on the same host as the initial request and then continues to replace the Host: header. And when it moves to another host, it doesn't replace the Host: header but it also doesn't make the second Host: header get used in the request. This change is verified by the two new test cases 184 and 185. Daniel (8 September 2004) - Modified the test suite to be able to use and run with customized port numbers. This was always intended but never before possible. Now a simple change in the runtests.pl script can make all tests use different ports. The default ports in use from now on are 8990 to 8993. Daniel (2 September 2004) - Minor modification of an SSL-related error message. Daniel (31 August 2004) - David Tarendash found out that curl_multi_add_handle() returned CURLM_CALL_MULTI_PERFORM instead of CURLM_OK. Daniel (30 August 2004) - Make "Proxy-Connection: close" close the current proxy connection, as Roman Koifman found out. Daniel (24 August 2004) - Fixed a getdate problem by post-replacing the getdate.c file after the bison/yacc process to add the fix Harshal Pradhan suggested. The problem caused a crash on Windows when parsing some dates. Daniel (23 August 2004) - Roman Koifman pointed out that libcurl send Expect: 100-continue on POSTs even when told to use HTTP 1.0, which is not correct. Test case 180 and 181 verify this. - Added test case 182 to verify that zero byte transfers call the callback properly. Daniel (20 August 2004) - Alexander Krasnostavsky made the write callback get called even when a zero byte file is downloaded. Daniel (18 August 2004) - Ling Thio pointed out that when libcurl is built ipv6-enabled, it still did reverse DNS lookups when fed with a numerical IP-address (like http://127.0.0.1/), although it doesn't when built ipv6-disabled. libcurl should never do reverse lookups. Daniel (17 August 2004) - Kjetil Jacobsen noticed that when transferring a file:// URL pointing to an empty file, libcurl would return with the file still open. - Alexander Krasnostavsky pointed out that the configure script needs to define _THREAD_SAFE for AIX systems to make libcurl built really thread-safe. Also added a check for the xlc compiler on AIX, and if that is detect we use the -qthreaded compiler option Daniel (16 August 2004) - libcurl now allows a custom "Accept-Encoding:" header override the internally set one that gets set with CURLOPT_ENCODING. Pointed out by Alex. - Roland Krikava found and fixed a cookie problem when using a proxy (the path matching was wrong). I added test case 179 to verify that we now do right. Daniel (15 August 2004) - Casey O'Donnell fixed some MSVC makefile targets to link properly. Daniel (11 August 2004) - configure now defines _XOPEN_SOURCE to 500 on systems that need it to build warning-free (the only known one so far is non-gcc builds on 64bit SGI IRIX). (Reverted this change later as it caused compiler errors.) - the FTP code now includes the server response in the error message when the server gives back a 530 after the password is provided, as it isn't necessary because of a bad user name or password. Version 7.12.1 (10 August 2004) Daniel (10 August 2004) - In OpenSSL 0.9.7d and earlier, ASN1_STRING_to_UTF8 fails if the input is already UTF-8 encoded. This made the certificate verification fail if the remote server used a certificate with the name UTF-8 encoded. Work-around brought by Alexis S. L. Carvalho. Daniel (9 August 2004) - I fixed the configure script for krb4 to use -lcom_err as well, as I started to get link problems with it unless I did that on my Solaris 2.7 box. I don't understand why I started to get problems with this now! Daniel (5 August 2004) - Enrico Scholz fixed the HTTP-Negotiate service name to be uppercase as reported in bug report #1004105 Daniel (4 August 2004) - Gisle Vanem provided a fix for the multi interface and connecting to a host using multiple IP (bad) addresses. - Dylan Salisbury made libcurl no longer accept cookies set to a TLD only (it previously allowed that on the seven three-letter domains). Daniel (31 July 2004) - Joel Chen reported that the digest code assumed quotes around the contents a bit too much. Daniel (28 July 2004) - Bertrand Demiddelaer fixed the host name to get setup properly even when a connection is re-used, when a proxy is in use. Previously the wrong Host: header could get sent when re-using a proxy connection to a different target host. - Fixed Brian Akins' reported problems with duplicate Host: headers on re-used connections. If you attempted to replace the Host: header in the second request, you got two such headers! - src/Makefile.am now includes the Makefile.inc file to get info about files Daniel (26 July 2004) - Made "curl [URL] -o name#2" work as expected. If there's no globbing for the #-number, it will simply be used as #2 in the file name. - Bertrand Demiddelaer fixed testing with valgrind 2.1.x and added two missing newlines in the cookie informationals. Daniel (24 July 2004) - I fixed the autobuilds with ares, since they now need to have buildconf run in the ares dir before the configure script is run. - Added Casey O'Donnell's curl_easy_reset() function. It has a proto in curl/curl.h but we have no man page yet. Daniel (20 July 2004) - Added buildconf and buildconf.bat to the release archives, since they are handy for rebuilding curl when using a daily snapshot (and not a pure CVS checkout). Daniel (16 July 2004) - As suggested by Toby Peterson, libcurl now ignores Content-Length data if the given size is a negative number. Test case 178 verifies this. Daniel (14 July 2004) - Günter Knauf has made the Netware builds do without the config-netware.h files, so they are now removed from the dist packages. - Günter Knauf made curl and libcurl build with Borland again. - Andres Garcia fixed the common test 505 failures on windows. Daniel (6 July 2004) - Andrés García found out why the windows tests failed on file:// "uploads". Daniel (2 July 2004) - Andrés García reported a curl_share_cleanup() crash that occurs when no lock/unlock callbacks have been set and the share is cleaned up. Daniel (1 July 2004) - When using curl --trace or --trace-ascii, no trace messages that were sent by curl_easy_cleanup() were included in the trace file. This made the message "Closing connection #0" never appear in trace dumps. Daniel (30 June 2004) - Niels van Tongeren found that setting CURLOPT_NOBODY to TRUE doesn't disable a previously set POST request, making a very odd request get sent (unless you disabled the POST) a HEAD request with a POST request-body. I've now made CURLOPT_NOBODY enforce a proper HEAD. Added test case 514 for this. Daniel (29 June 2004) - Günter Knauf made the testcurl.pl script capable of using a custom setup file to easier run multiple autobuilds on the same source tree. - Gisle fixed the djgpp build and fixed a memory problem in some of the reorged name resolved code. - Fixed code to allow connects done using the multi interface to attempt the next IP when connecting to a host that resolves to multiple IPs and a connect attempt fails. Daniel (27 June 2004) - Based on Rob Stanzel's bug report #979480, I wrote a configure check that checks if poll() can be used to wait on NULL as otherwise select() should be used to do it. The select() usage was also fixed according to his report. Mac OS X 10.3 says "poll() functionality for Mac OS X is implemented via an emulation layer on top of select(), not in the kernel directly. It is recommended that programs running under OS X 10.3 prefer select() over poll(). Configure scripts should look for the _POLL_EMUL_H_ define (instead of _POLL_H_ or _SYS_POLL_H_) and avoid implementations where poll is not implemented in the kernel." Yes, we can probably use select() on most platforms but today I prefered to leave the code unaltered. Daniel (24 June 2004) - The standard curl_version() string now only includes version info about involved libraries and not about particular features. Thus it will no longer include info about ipv6 nor GSS. That info is of course still available in the feature bitmask curl_version_info() offers. - Replaced all occurances of sprintf() with snprintf(). This is mostly because it is "A Good Thing" rather than actually fixing any known problem. This will help preventing future possible mistakes to cause buffer overflows. - Major reorganization in the host resolve code (again). This time, I've modified the code to now always use a linked list of Curl_addrinfo structs to return resolved info in, no matter what resolver method or support that is available on the platform. It makes it a lot easier to write code that uses or depends on resolved data. Internally, this means amongst other things that we can stop doing the weird "increase buffer size until it works" trick when resolving hosts on ipv4-only with gethostbyname_r(), we support socks even on libcurls built with ipv6 enabled (but only to socks servers that resolve to an ipv4 address) and we no longer deep-copy or relocate hostent structs (we create Curl_addrinfo chains instead). The new "hostent to Curl_addrinfo" converter function is named Curl_he2ai() and is slightly naive and simple, yet I believe it is functional enough to work for libcurl. Daniel (22 June 2004) - David Cohen pointed out that RFC2109 says clients should allow cookies to contain least 4096 bytes while libcurl only allowed 2047. I raised the limit to 4999 now and made the used buffer get malloc()ed instead of simply allocated on stack as before. Extended test case 46 to include a cookie with very huge content to verify the fix. - Günter Knauf fixed getdate.y to remove a few warnings. I removed the ifdef'ed test we never ever use anyway. - Gisle Vanem fixed the certificate wildcard checks to support a '*'-letter anywhere in the wildcard string, support multiple '*'-letters in the wildcard and to allow the '*'-letter to match a string that includes a dot. Daniel (21 June 2004) - testcurl.sh is now removed completely, tests/testcurl.pl is the script to use when autobuilding curl! - Kjetil Jacobsen brought my attention to the fact that you cannot properly abort an upload with the readfunction callback, since returning 0 or -1 only stops the upload and libcurl will continue waiting for downloaded data and the server often waits for the rest of the upload data to arrive. Thus, I've now added the ability for read callbacks to return CURL_READFUNC_ABORT to abort an upload from a read callback. This will stop the transfer immediately with a CURLE_ABORTED_BY_CALLBACK return code. Test case 513 was added to verify that it works. I had to improve the test HTTP server too to dump the request to a file even when the client disconnects prematurely. Daniel (19 June 2004) - Luca Alteas provided a test case with a failing curl operation: when we POST to a site with --digest (or similar) set, and the server responded with a 302 Location: to the "authprobe" request, it was not treated correctly. We still will behave badly if FOLLOWLOCATION is enabled for this case, but I'm not in the mood to dive into this right now and will leave it as-is for now. Verified my fix with test case 177. Daniel (18 June 2004) - Gisle Vanem's patch that provides more details from the SSL layers (if you use an OpenSSL version that supports it). It also introduces two new types of data that can be sent to the debug callback: CURLINFO_SSL_DATA_IN and CURLINFO_SSL_DATA_OUT. - With David Byron's test server I could repeat his problem and make sure that POSTing over HTTPS:// with NTLM works fine now. There was a general problem with multi-pass authentication with non-GET operations with CONNECT. Daniel (16 June 2004) - Modified to keep the upload byte counter in an curl_off_t, not an int as before. 32bits is not enough. This is most likely the bug Jean-Louis Lemaire reported that makes 2GB FTP uploads to report error ("unaligned file sizes") when completed. Daniel (15 June 2004) - Luca Alteas reported a problem that I fixed: if you did a POST with CURLAUTH_DIGEST set but the server didn't require any authentication, libcurl would repeatedly send HEAD lots of times until it gives up. This was actually the case for all multi-pass authentications. Added test case 174, 175 and 176 to verify this. Daniel (14 June 2004) - Multipart formposts uploading files no longer inserts the files themselves into the huge prebuilt chunk. This enables libcurl to formpost files that is larger than the amount of system memory. When the file given is passed on stdin, libcurl still uses the old method of reading the full fill before the upload takes place. This approach was selected in order to not alter the behavior for existing applications, as when using stdin libcurl can't know the size of the upload and chunked transfer-encoding can only be used on HTTP 1.1 servers. Daniel (13 June 2004) - Gisle found out that we did wildcard cert name checks wrong, so that parts of the check wrongly was case sensitive. Daniel (11 June 2004) - Tim Sneddon brought a minor VMS fix to make curl build properly on his VMS machine. He also had some interesting libcurl patches... they might be able to do in a slightly nicer way. Discussions are in progress. Daniel (10 June 2004) - Gisle Vanem brought code cleanupsm better verbose output and better connect timeout handling when attempting to connect to a host that resolves to multiple IP addresses. - Steven Bazyl and Seshubabu Pasam pointed out a bug on win32 when freeing the path after a file:// transfer. Daniel (9 June 2004) - Alexander Krasnostavsky made 'configure --disable-http' work to build libcurl without HTTP support. I added a new return code for curl_formadd() in case libcurl is built with HTTP disable: CURL_FORMADD_DISABLED. - Alexander Krasnostavsky pointed out a missing file in the generated curllib.dsp file, and now people building with this should get a libcurl.lib file generated as it used to do before we generated this file. Daniel (8 June 2004) - Marty Kuhrt fixed a minor build problem for VMS. Daniel (7 June 2004) - Reverted the configure check from the 4th since it obviously didn't work. Remade it in a different manner that hopefully works better. Daniel (4 June 2004) - Günter Knauf brought patches to make curl build fine on NetWare again. - Made the configure checks for strerror_r() not exit the configure script when built for cross-compiling. Daniel (3 June 2004) - Chris Gaukroger pointed out that 'make test' attempts to run the tests even if curl is built cross-compiled. I've now made it output a short message instead, saying it isn't possible to do. - Alexander Krasnostavsky brought FTP 3rd party transfer support to libcurl. You can now use libcurl to transfer files between two remote hosts using FTP. There are a bunch of new options to control this with: CURLOPT_SOURCE_HOST CURLOPT_SOURCE_USERPWD CURLOPT_SOURCE_PATH CURLOPT_SOURCE_PORT CURLOPT_PASV_HOST CURLOPT_SOURCE_PREQUOTE CURLOPT_SOURCE_POSTQUOTE (They still remain to be documented properly in the curl_easy_setopt man page.) When using this, the ordinary CURLOPT_URL specifies the target URL, and you specify the source data with these additional options. ftp3rdparty.c is a new example source code showing how to use this. - Vincent Bronner fixed the HTTP Digest code to use the proxy user name and password when doing proxy authentication, it previously always used the host user name and password! Daniel (2 June 2004) - CURLOPT_UPLOAD and CURLOPT_PUT now do the exact same thing internally, which fixes some old confusions on when which of these should be used and what the differences are. - Applied Gisle's fixes to make curl build fine with lcc-win32 Version 7.12.0 (2 June 2004) Daniel (1 June 2004) - I clarified the --create-dirs option somewhat in the curl man page. - Renaud Duhaut corrected the curl_unescape man page. - David Byron modified one of Massimiliano Ziccardi's recent MSVC makefile changes to now again use the mm lib by default. Daniel (26 May 2004) - Mohun Biswas added release-zlib and debug-zlib targets to the MSVC libcurl Makefile - David Byron reported a problem with proxy authentication when doing CONNECT, like when accessing HTTPS sites wiht a proxy. This probably broke when I rewrote the auth stuff recently. - I added fileupload.c in the examples directory, showing how an upload to a file:// URL is made. Daniel (25 May 2004) - Massimiliano Ziccardi updated the MSVC makefiles. Daniel (24 May 2004) - libcurl now supports "uploading" to file:// URLs. Test 204 and 205 were added to verify. - Simon Josefsson added a idn_free() function in libidn 0.4.5 as a reaction to Gisle's previous mail. We now use this function, and thus we require libidn 0.4.5 or later. No earlier version will do. - Robert D. Young reported that CURLOPT_COOKIEFILE and CURLOPT_COOKIE could not be used both in one request. Fixed it and added test case 172 to verify. Daniel (21 May 2004) - While talking to host a.b.c, libcurl did wrongly not accept cookies that were set to the domain .a.b.c (that is with a dot prefix). This is now fixed and test case 171 verifies it. Daniel (20 May 2004) - Jesse Noller reported that the upload speed info reported by libcurl was wrong. The same was true for the download speed. Fixed now. Daniel (19 May 2004) - David Byron added test case 170 - this used to crash the previous version of curl. Daniel (17 May 2004) - Peter Sylvester's patch that addresses two flaws in the peer certificate name verification: o when multiple common names are used (as in the curl tests), the last name needs to be selected. o allow comparing with encoded values, at least with BMP and ISO latin1 encoded T61strings. - All 191 test cases run through the torture test OK! 'make test-torture' is now available in the root makefile (on configure-based environments). Daniel (14 May 2004) - With a slightly modified ftpserver.pl I've now run almost all tests through with runtests.pl -t. This is goodness! - Since I have been unable to contact the CVS admins for several months, I've decided that the current CVS hosting was not good enough. I've now moved the CVS repo once again, see README for updated cvs checkout instructions. Daniel (13 May 2004) - runtests.pl -t now runs fine all the way to test 100. I believe test case 100 fails because of an FTP server problem. Daniel (12 May 2004) - General cleanups all over to make libcurl survive and do well when a memory function returns NULL. runtests.pl -t now works fine for the first 26 test cases. Daniel (11 May 2004) - Seshubabu Pasam provided a patch that introduces curl_global_init_mem() - like normal curl_global_init() but allows the app to replace all memory functions with its own set. I modified it slightly. - Based on Luca Alteas' comments, I modified the curllib.dsp generation code. Daniel (10 May 2004) - Gisle mailed Simon Josefsson (of libidn fame) about the benefits of a separate free()-function by that lib to make sure the memory is freed by the same memory subsystem that allocated it. He responded positively and this will likely cause us to require a newer version of libidn as soon as Simon releases one with such a libidn_free() function. - James Bursa made runtests.pl's -t option work for any given test case, and I edited to allow -g too. Not even test case 1 worked... - Luca Altea made the nc= field not use quotes in outgoing HTTP Digest headers. - Andrés García fixed a problem in the test script that made it fail to recognize our own running HTTP server. Daniel (7 May 2004) - James Bursa fixed the memanalyze.pl script to conder malloc(0) areas OK to free() and he made two failed-resolve error messages use the new display- name instead of the internally-used name. - Gisle Vanem tried curl with www.etdomenenavnkanmaksimaltinneholdesekstitrebokstaversliksomdette.com which caused problems, and I fixed the single zero byte buffer overwrite that occurred (due to a stupid protocol buffer size and parser). - Made the lib/curllib.dsp file get generated automaticly when a distribution package is made, with the msvcproj.* files as templates and all win32-sources added. I think this can be made to work better than the always lagging-behind previous approach. I'm not sure this builds a working project file right now though! Daniel (6 May 2004) - Michael Benedict brought a fix that fills in the errorbuffer properly when ares fails to resolve a name for a case not previously dealt with like this. Daniel (5 May 2004) - Joe Halpin fixed the annoying typecast warning in lib/ldap.c - Gisle Vanem fixes: o memdebug to not access NULL on several places o libcurl.def; curl_formparse is gone. o progress.c; fixed the percent values being trunced to 0. o if2ip.*; constified the 'interface' argument. - Tor Arntsen reported that many of his autobuilds froze and I found and fixed a problem introduced with the HTTP auth overhaul that could lead to a never-ending internal request-loop due to un-initialized variables! - Removed several compiler warnings on various compilers/platforms. Daniel (4 May 2004) - curl_formparse() has been removed from the library. It has been marked and mentioned as deprecated for several years. Daniel (3 May 2004) - Rewritten HTTP authentication code. The previous code could not properly deal with the added test cases 167, 168 and 169. I've now rewritten the code to better separate host and proxy authentication and not re-use the same variables as much as before as it proved non working in the more involved cases. All the current tests run OK now, and so do the new ones. The curl tool got a new option named --proxy-digest to enable HTTP Digest authentication with the proxy. I also made the library support it. - Gisle Vanem made the LDAP code work with wldap32.dll as supplied with Win-98/ME/2000/XP, so no extra .dlls are required when curl/libcurl is used on these Windows versions. Daniel (30 April 2004) - runtests.pl now scans the valgrind log for valgrind-detected memory leaks after each test case if valgrind was found and used. - I modified the app-code in curl to include the new lib/curlx.h and only access those functions using the curlx_-prefix in preparation for the future removal of several curl_-functions from the public libcurl API. - Introduced lib/curlx.h as a single header to provide the curlx_-functions to apps. - Added notices in the man pages for curl_getenv, curl_mprintf, curl_strequal and curl_strnequal that they are subject for removal in a future release. STOP USING THESE FUNCTIONS. - Mihai Ionescu noticed he couldn't do formposts with whitespace in the file names and yes, I broke that on April 23. Sigh. I fixed it now and added test case 166 to verify it. - Luca Altea pointed out a mistake left from the Digest patch of yesterday. Daniel (29 April 2004) - Made IDN domains work when sending requsts over HTTP proxy as well. Added test case 165 to verify the functionality. - Fixed a bug in the new internal host name setup when re-using connections. - James Bursa found out that curl_easy_duphandle() with ares-built libcurl created a bad handle that would crash in the first name resolve attempt. This is now fixed and test case 512 was added to verify it. - Luca Altea provided a major HTTP Digest code fix and cleanup. We now follow the Digest RFC a lot better. - Gisle Vanem made the SSL code use ERR_error_string_n() where applicable. Daniel (27 April 2004) - I remodeled Gisle's IDN code slightly and now we convert both the host name and proxy name to the ACE encoded version to use internally for resolves and cookies etc. They are now using one 'struct hostname' each that keep both the original name and the possibly encoded name. IDN resolves work for me now using ipv6, ipv4 and ares resolving. Even cookies on IDN sites seem to do right. I got some failures at first when CHARSET wasn't set at all which confused libidn completely and it decided by encoding of choice was 'ANSI_X3.4-1968'... - made 'configure --without-libidn' work Daniel (25 April 2004) - Fixed the src/hugehelp.c file to include "setup.h" instead of "config.h" to make the problems with USE_MANUAL on windows go away. - configure --without-ssl could still wrongly include some OpenSSL info in the Makefiles if pkg-config had info about OpenSSL. Bug #941762 reported by Martin. - Since we can now build and use quite a large set of 3rd party libraries, I decided I would make configure produce a summary at the end showing what libraries it uses and if not, what option to use to make it use that. I also added some other random info that is nice in a "configure summary" output. - Applied TommyTam's patch that now make curl work with telnet and stdin properly on Windows. - The changes for today below were made by me and Gisle Vanem. The file previously known as hostip.c has now undergone a huge cleanup and split: hostip.c explained ================== The main COMPILE-TIME DEFINES to keep in mind when reading the host*.c source file are these: CURLRES_IPV6 - this host has getaddrinfo() and family, and thus we use that. The host may not be able to resolve IPv6, but we don't really have to take that into account. Hosts that aren't IPv6-enabled have CURLRES_IPV4 defined. CURLRES_ARES - is defined if libcurl is built to use c-ares for asynchronous name resolves. It cannot have ENABLE_IPV6 defined at the same time, as c-ares has no ipv6 support. This can be Windows or *nix. CURLRES_THREADED - is defined if libcurl is built to run under (native) Windows, and then the name resolve will be done in a new thread, and the supported asynch API will be the same as for ares-builds. If any of the two previous are defined, CURLRES_ASYNCH is defined too. If libcurl is not built to use an asynchronous resolver, CURLRES_SYNCH is defined. The host*.c sources files are split up like this: hostip.c - method-independent resolver functions and utility functions hostasyn.c - functions for asynchronous name resolves hostsyn.c - functions for synchronous name resolves hostares.c - functions for ares-using name resolves hostthre.c - functions for threaded name resolves hostip4.c - ipv4-specific functions hostip6.c - ipv6-specific functions The hostip.h is the single united header file for all this. It defines the CURLRES_* defines based on the config*.h and setup.h defines. - Added function header comments to many functions in an attempt to better explain the purpose of them all. - configure --with-libidn is now supported. It makes the configure script check for libidn libs and include files in the prefix path given. If you say --with-libidn=/usr/local, it will check for the lib in /usr/local/lib and the includes in /usr/local/include etc. - curl_version_info() now returns a struct aged CURLVERSION_THIRD including libidn version info. The string curl_version() returns also includes libidn version info, if available. Version 7.11.2 (26 April 2004) Daniel (25 April 2004) - Erwin Authried pointed out that configure --disable-manual didn't do right if you already had a src/hugehelp.c source file present (which most people do I guess). It now uses the USE_MANUAL define properly. Daniel (23 April 2004) - Gisle Vanem found and fixed a memory leak when doing (failing) Windows threaded name resolves. - I also added test case 163 just to make sure -F "var=2GB files. curl -V now outputs 'Largefile' in the Features: field if this is the case. Most systems are likely to support this. - We offer a CURL_FORMAT_OFF_T define in the public header, which can be used to printf() curl_off_t variables. We also modified the libcurl sources to use this define instead of the previous %Od approach (although I've left the O-flag functional in the code). This should also prevent compilers to warn on the home-grown option. - Fixed the resume-check code to test for a working resume at the end of the headers and not at the first body-byte. - CURLOPT_DNS_USE_GLOBAL_CACHE is now considered obsolete. Stop using it. If you need a global DNS cache for whatever reason, use the share interface and you'll get a global cache that works the way it should work. You can even have any number of global caches, all at your command. This is now also mentioned in the docs. - Made the *printf code support the z-flag to enable size_t printf() in a manner similar to how glibc allows it. To make printfing of this work on platforms with 64bit size_t and 32bit ints. If there even are any! ;-) - Christopher R. Palmer discovered that if you CURLOPT_FRESH_CONNECT and CURLAUTH_NTLM (or CURLAUTH_ANY and libcurl then picked NTLM), libcurl would loop without succeeding to authenticate due to the new connection that was made for all round-trips in the authentication. Now, the FRESH_CONNECT is remade to only matter for the first connection made with curl_easy_perform() and all the rest that might follow due to FOLLOWLOCATION or HTTP authentication are now ignoring that option. - Adjusted the QUIT code slightly since it could core-dump. - Corrected the test suite's FTP server to provide a correct size to the 'verifiedserver' request. Daniel (27 February 2004) - Joe Halpin made the FTP code send QUIT on the control connection before disconnecting the TCP connection. This is what good-behaving ftp clients should do. Daniel (26 February 2004) - David Byron updated several files to make curl build fine on MSVC 6. He also added the 'buildconf.bat' that works like the 'buildconf + configure' combo does on unixes. - Gisle Vanem made the memdebug stuff support calloc() as well. - Tor Arntsen pointed out that testcurl.sh needed to remove the generated files in order to have them re-generated in each build. - Andy Serpa found out that the share interface did not enjoy life when not having the lock and unlock callbacks set, even though documented to be OK. It still is OK, and now the code won't segfault anymore! Daniel (25 February 2004) - Based on a patch by Greg Hewgill I modified how long long is used in the mprintf code, as we can use a 64bit type with MSVC that is a long long equivalent. This corrects some weird large file behaviors on windows. - Tor Arntsen helped me work out --enable-debug to work better with different versions of the gcc and icc compilers. - Added CURLOPT_SHARE to the curl_easy_setopt.3 man page. Daniel (22 February 2004) - Applied the final pieces of Gisle Vanem's patch that brings a working name resolve timeout to the windows versions of curl! Daniel (21 February 2004) - David Byron's fix to allow the speed-limit logic work even if you set limit-rate. It does work on the expense of the rate limiter. Daniel (20 February 2004) - configure --enable-debug with gcc now also tries to detect the icc compiler (which somehow gets treated as if it is a gcc) to stop using all the gcc options with it, and we also provide -isystem options for each extra -I option the configure script has figured out (for OpenSSL, kerberos, zlib, Heimdal etc). This of course to prevent warnings on headers we don't have control of. Daniel (19 February 2004) - Doug Porter made libcurl use the HOME environment variable before the getpwuid results when looking for .netrc files. - If 'configure --enable-debug' is used with gcc, it now checks which gcc version it is and uses as picky compiler options as possible for the particular version. - Code that can be used in both the lib and in the curl app is now made to use the curlx_ prefix. The first function to be available like this is the curlx_strtoll() function. This is made to allow the app to use existing code, but without polluting the libcurl API. Further explanations posted here: http://curl.haxx.se/mail/lib-2004-02/0215.html Daniel (18 February 2004) - Fixed buildconf to not use "which" as AIX and Tru64 have what have been referred to as "horribly broken 'which' programs". - Made sure dns cache timeout set to -1 really means caching forever. Daniel (17 February 2004) - Made it possibly to build c-ares with the libcurl memdebug system to better track memory. Daniel (16 February 2004) - When using ares, we now initialize the ares 'channel' in curl_easy_init() and re-use that same handle during the entire curl handle's life-time. It improves performance. - Fixed a problem when displaying verbose for ipv6-enabled libcurls and re-used connections. Problem reported and fix verified by Grigory Entin. - Jeff Lawson fixed the version-check in the SOCKS5 code. Daniel (15 February 2004) - Fixed a case where a host cache entry was not flagged in-use properly when a cached entry was used. - Andrés García's patch that checks for winmm in the configure script was applied. Daniel (13 February 2004) - Ben Greear's SO_BINDTODEVICE patch for the binding of the local end to a specific network interface. - Greg Hewgill found out that the variable holding 'contentlength' wasn't big enough to hold a large file! - Tor Arntsen fixed a 64bit-related problem in date-related code in the ftp department, and there was another potential problem in the name resolve code too. Daniel (11 February 2004) - Removed a few variables that were only set but never used, as some compilers warn about that and we do not like compiler warnings! - Removed the need for symlinks in the tests/data directory if curl is built outside of the source directory and the 'make test' is used. This was done by providing a "source dir path" to the scripts/servers. - Now, if the configure script can't find an nroff tool or an option to nroff to use to convert man pages with, it will completely switch off the built-in manual. - 'configure --disable-manual' completely disables the built-in manual from the curl command tool. - Andrés García fixed the configure script and a minor source edit, and now he has managed to get msys/mingw to run configure and then build! Daniel (9 February 2004) - The default HTTP Accept: header was modified to the much simpler "Accept: */*". - P R Schaffner updated the curl-ssl spec file for RPMs. - Dominick Meglio brought lots of documentation for the share interface's man pages that were previously missing. - Tor Arntsen provided a patch that makes libcurl work-around a bug in the AIX5 implementation of getaddrinfo(). This makes the FTP PORT stuff work on ipv6-enabled AIX builds. - Ken Rastatter provided portability fixes for the curlgtk.c example, and now it runs on windows with GTK as well! Daniel (6 February 2004) - Andrés García made the configure script find gethostbyname() fine when run with mingw on windows. - Modified the ldap code to use proper function pointers all over (instead of mixed data and function pointers) to work-around the picky MIPSPro compiler warnings. - A custom Host: header is only considered if the request is not made by following a location. After discussions with Tim Baker. Daniel (5 February 2004) - The libz part of the configure script now only set the two libz-related define HAVE_ZLIB_H and HAVE_LIBZ if both the lib and the header is found. If one is missing, none of the defines is set. - Andrés García fixed the Mingw makefiles. - Len Krause reported that curl 7.9.X could do uploading from stdin without doing chunked encoding, which current curl cannot do even if you disable the transfer-encoding chunked header. Now it can again, and test case 98 verifies this functionality. - Tor Arntsen fixed a weird getaddrinfo() usage in the FTP code, preventing the ipv6-code for PORT work on AIX 5.2. We now also provide (better) error messages when bailing out in the that function. - Tor Arntsen now provides AIX and IRIX (using gcc, xlc and the MIPSPro compilers) automated build logs (http://curl.haxx.se/auto/) and we've fixed numerous minor quirks to make less warnings appear. Daniel (4 February 2004) - Based on a patch by Gilad, we now use the custom timeouts when waiting for a server to connect when using FTP PORT. Previously we always waited 10 seconds, no more no less. We now also changed the default (if no timeout is set) to wait 60 seconds for the connect before we fail. Daniel (3 February 2004) - Modified to link with c-ares instead of ares. Daniel (2 February 2004) - Added a configure test to check for which option the (g)nroff tool wants to extract plain text from the man pages. Tor Arntsen told us the AIX version of GNU gnroff doesn't support -man! - Added an undef of accept in memdebug.h to make curl build with --enable-debug on AIX 5.2 which seems to have accept defined. Reported by Tor Arntsen. - curl_version() now includes c-ares version info, and curl_version_info() now returns a struct with version SECOND that also includes that info. - We are now officially using c-ares for asynch name resolves. c-ares is the new library, based on the existing ares but with an extended and slightly modified API. - Dirk improved the ares timeout code, and now we also include the ares error string when we fail to resolve a name. - Another tweak to make test case 91 run fine. Now we have another bit on a connection that is set true if the connection is marked for 'retry'. That makes the connection get closed and re-opened and the HTTP-done code must not complain on the fact that no data was received. - Based on Dirk Manske's patch, I modified the name resolving with ares to feature a timeout for really slow lookups. It now defaults to 300 seconds, but is now adjusted to the CONNECTTIMEOUT/TIMOUE timeouts if one of them is set. - Fixed the inclusion of ca-bundle.h to really use the one in the build dir before the one in the source dir. Domenico Andreoli found out and reported. - Added test case 97, a simple POST with a custom Content-Type header replacing the original application/x-www-form-urlencoded one. Daniel (30 January 2004) - Added code that attempts to fix the test 91 failure. As has been figured out by Patrick Smith, the error happens because we re-use a connection that the server is just about to close and we even manage to send away the request without seeing an error. On the first read attempt we get a ECONNRESET. Starting now, we attempt to detect this and if so, we retry the request on a fresh connection. - I added test case 510 which is a custom program that does a POST using a read callback, with chunked transfer-encoding. - Adjusted one of the MPE/iX changes as it made test case 504 fail all over. - Added --socks as a recognized option. It works just like --proxy but sets a SOCKS5 proxy to use. SOCKS5 support has been available in libcurl for a while, just not provided by the curl tool. This does not currently work for IPv6-enabled libcurls. Daniel (29 January 2004) - Stadler Stephan pointed out that src/hugehelp.c included config.h without checking the define if its present... - Ken Hirsch provided patches to make curl build fine on the MPE/iX operating system. - Dan Fandrich compiled curl with lots of aggressively pedantic compiler options and thus found a few minor errors and did some general cleanups to avoid them. - Dirk Manske fixed a flaw in ares that prevented it to use non-blocking sockets properly. Daniel (28 January 2004) - Richard Bramante fixed chunked transfer-encoded "uploads" to send a final CRLF combo properly. Daniel (27 January 2004) - Made the response-headers during a CONNECT request to a proxy get passed on as regular headers, so they appear with -i/-I options and similar. - Based on a patch by Gisle Vanem, I've made the progress meter display properly switch to a GB-display when more than 9999MB have been transfered. Daniel (23 January 2004) - Gisle Vanem pointed out a curlrc parser problem/crash when an option with a required didn't have one and was on the last line of a file. - More Windows fixes for large files. We now build and link with ../lib/strtoofft.c in the app code since Curl_strtoll() is not a provided libcurl function... Perhaps we should consider a 'common' dir or similar where we put source code used in both the lib and the client. Or perhaps we'll just make this function available in the library... - Vincent Bronner found out the socks5 code crashed when no username was set. - Vincent Bronner spotted a problem with proxy username/password when re-using a persistent connection. - Fixed the progress meter display for files larger than 2^31 bytes. Gisle Vanem reported. Daniel (22 January 2004) - Gisle Vanem made strtoll() get used when curl is built with the mingw compiler. - Gisle Vanem fixed the compressed help text code to display properly. - Removed the '#define HttpPost' from the public header file, as curl_httppost is the proper name and it has been for quite some time now. Fixes another name space pollution. - Added 'curl_off_t' typedef in the public header file, to be used to provide large file sizes to the *_LARGE options. Adjusted the code all over to use this variable type instead of 'off_t'. This is an attempt to make the large file support work on more platforms. The configure script now checks the size of the curl_off_t instead of the plain off_t. Version 7.11.0 (22 January 2004) Daniel (21 January 2004) - Removed the defines in the public header file with TIMECOND_ prefixes. They have been obsolete since April 22nd 2002, and if this causes anyone any problems now it is very easy to just add CURL_ to the names. This corrects this name space pollution. Daniel (19 January 2004) - David Byron cleaned up how --trace with no option was treated, and also arguments in a config file without a required parameter! Daniel (16 January 2004) - Gisle Vanem fixed a few issues where compilers warned about variables possibly being used unassigned. - Minor Interix build problem fixed. Daniel (15 January 2004) - Peter Sylvester pointed out some necessary escaping needed in the acinclude.m4 file when automake 1.8 or later is used. Daniel (14 January 2004) - Vincent Bronner fixed the Curl_resolv() return code. This extends the fix Steve Green provided on december 3... Daniel (13 January 2004) - Luke Call made the win32 version of the password prompting function support backspace. - Dan Fandrich fixed the hugehelp source file to contain both a compressed and an uncompressed version in the distribution, so that more people easier can build curl with the compressed version. - Diego Casorran brought another AmigaOS build patch for native Amiga builds. - Matt Veenstra updated the Mac OS X framework files. - Brian R Duffy brought a section to the INSTALL file on how to build a SSL-enabled curl using the free Borland C++ compiler. He also updated the Borland lib/Makefile.b32. - I fixed the test case 509 which I broke yesterday. Now the libtest are compiled with an include path that points to the library's source dir, so that the libtests can include files from the source tree. This was made to make it possible to use the USE_SSLEAY define in the library test files. Daniel (12 January 2004) - Peter Sylvester brought code that now allows a callback to modified the URL even when the multi interface is used, and then libcurl will simulate a "follow location" to that new URL. Test 509 was added to test this feature. - Extended the time we retry servers in the test script, and I also made it retry the https and ftps servers before they are considered bad. I believe the previous approach could turn problematic on really slow hosts. Version 7.11.0-pre1 (12 January 2004) Daniel (11 January 2004) - Dominick Meglio pointed out FTPS should use default port 990 according to IANA. Daniel (8 January 2004) - Fixed the SPNEGO configure check to not use -R or other non-portable options in the LDFLAGS. Reported by Pierre in bug report #872930. Daniel (5 January 2004) - Dan Fandrich provided a fix on our zlib usage. - David J Meyer's patch that introduce large file support to libcurl was applied. New curl_easy_setopt options that accept 'off_t' arguments are: INFILESIZE_LARGE RESUME_FROM_LARGE MAXFILESIZE_LARGE Daniel (4 January 2004) - Based on Dominick Meglio's comments, I made our private version of gettimeofday() declared static. This would otherwise collide with the same function in other libs (like ares for example). - Added Dominick Meglio's description on how to build libcurl with ares on win32.