]> granicus.if.org Git - curl/log
curl
7 years agotests: fix the authretry tests
Michael Kaufmann [Sat, 11 Mar 2017 19:06:56 +0000 (20:06 +0100)]
tests: fix the authretry tests

Do not call curl_easy_reset() between the requests, because the
auth state must be preserved for these tests.

Follow-up to 0afbcfd

7 years agoproxy: skip SSL initialization for closed connections
Michael Kaufmann [Fri, 10 Mar 2017 22:57:09 +0000 (23:57 +0100)]
proxy: skip SSL initialization for closed connections

This prevents a "Descriptor is not a socket" error for WinSSL.

Reported-by: Antony74@users.noreply.github.com
Reviewed-by: Jay Satiro
Fixes https://github.com/curl/curl/issues/1239

7 years agocurl_easy_reset: Also reset the authentication state
Michael Kaufmann [Sat, 11 Mar 2017 17:22:30 +0000 (18:22 +0100)]
curl_easy_reset: Also reset the authentication state

Follow-up to 5278462
See https://github.com/curl/curl/issues/1095

7 years agoauthneg: clear auth.multi flag at http_done
Isaac Boukris [Thu, 26 Jan 2017 22:42:28 +0000 (00:42 +0200)]
authneg: clear auth.multi flag at http_done

This flag is meant for the current request based on authentication
state, once the request is done we can clear the flag.

Also change auth.multi to auth.multipass for better readability.

Fixes https://github.com/curl/curl/issues/1095
Closes https://github.com/curl/curl/pull/1326

Signed-off-by: Isaac Boukris <iboukris@gmail.com>
Reported-by: Michael Kaufmann
7 years agourl: don't compile detect_proxy if HTTP support is disabled
Dan Fandrich [Sat, 11 Mar 2017 17:01:54 +0000 (18:01 +0100)]
url: don't compile detect_proxy if HTTP support is disabled

7 years agocmdline-opts: fixed a few typos
Dan Fandrich [Sat, 11 Mar 2017 10:44:06 +0000 (11:44 +0100)]
cmdline-opts: fixed a few typos

7 years agoREADME.md: add coverity and travis badges
Daniel Stenberg [Fri, 10 Mar 2017 13:50:29 +0000 (14:50 +0100)]
README.md: add coverity and travis badges

7 years agoISSUE_TEMPLATE: for bugs, ask questions on the mailing list
Daniel Stenberg [Fri, 10 Mar 2017 09:32:01 +0000 (10:32 +0100)]
ISSUE_TEMPLATE: for bugs, ask questions on the mailing list

and try to add the top comment within an HTML comment in the hope
that it might get hidden if the text is kept

7 years agoopenssl: add two /* FALLTHROUGH */ to satisfy coverity
Daniel Stenberg [Fri, 10 Mar 2017 07:46:54 +0000 (08:46 +0100)]
openssl: add two /* FALLTHROUGH */ to satisfy coverity

CID 1402159 and 1402158

7 years agotests: disabled 1903 now
Daniel Stenberg [Thu, 9 Mar 2017 22:55:30 +0000 (23:55 +0100)]
tests: disabled 1903 now

Test 1903 is doing HTTP pipelining, and that is a timing and ordering
sensitive operation and this fails far too often on the Travis CI
leading to people more or less ignoring test failures there. Not good.

The end of pipelning is probably coming sooner rather than later
anyway...

7 years agotls-max.d: added to the makefile
Dan Fandrich [Thu, 9 Mar 2017 22:08:06 +0000 (23:08 +0100)]
tls-max.d: added to the makefile

7 years agobuild: fixed making man page in out-of-tree tarball builds
Dan Fandrich [Thu, 9 Mar 2017 21:45:40 +0000 (22:45 +0100)]
build: fixed making man page in out-of-tree tarball builds

The man page taken from the release package is found in a different
location than if it's built from source. It must be referenced as $< in
the rule to get its correct location in the VPATH.

7 years agomkhelp: simplified the gzip code
Dan Fandrich [Thu, 9 Mar 2017 21:15:54 +0000 (22:15 +0100)]
mkhelp: simplified the gzip code

This eliminates the need for an external gzip program, which wasn't
working with Busybox's gzip, anyway. It now compresses using perl's
IO::Compress::Gzip

7 years agopolarssl: fixed compile errors introduced in 6448f98c
Dan Fandrich [Thu, 9 Mar 2017 08:06:13 +0000 (09:06 +0100)]
polarssl: fixed compile errors introduced in 6448f98c

7 years agobump: next release will be known as 7.54.0
Daniel Stenberg [Wed, 8 Mar 2017 22:43:24 +0000 (23:43 +0100)]
bump: next release will be known as 7.54.0

...due to the newly added CURL_SSLVERSION_MAX_* functionality

7 years agoopenssl: unbreak the build after 6448f98c1857de
Daniel Stenberg [Wed, 8 Mar 2017 22:38:26 +0000 (23:38 +0100)]
openssl: unbreak the build after 6448f98c1857de

Verified with OpenSSL 1.1.0e and OpenSSL master (1.1.1)

7 years agovtls: add options to specify range of enabled TLS versions
Jozef Kralik [Tue, 13 Dec 2016 20:10:00 +0000 (21:10 +0100)]
vtls: add options to specify range of enabled TLS versions

This commit introduces the CURL_SSLVERSION_MAX_* constants as well as
the --tls-max option of the curl tool.

Closes https://github.com/curl/curl/pull/1166

7 years agoRELEASE-NOTES: synced with 6888a670aa01
Daniel Stenberg [Wed, 8 Mar 2017 09:55:06 +0000 (10:55 +0100)]
RELEASE-NOTES: synced with 6888a670aa01

7 years agoMANPAGE: clarify the dash situation in meta data
Daniel Stenberg [Wed, 8 Mar 2017 08:20:36 +0000 (09:20 +0100)]
MANPAGE: clarify the dash situation in meta data

7 years agoinsecure.d: clarify that this is for server connections
Daniel Stenberg [Wed, 8 Mar 2017 08:15:53 +0000 (09:15 +0100)]
insecure.d: clarify that this is for server connections

Assisted-by: Ray Satiro
Bug: https://curl.haxx.se/mail/lib-2017-03/0002.html

7 years agotest1260: added http as a required feature
Dan Fandrich [Wed, 8 Mar 2017 08:06:56 +0000 (09:06 +0100)]
test1260: added http as a required feature

7 years agomaketgz: Run updatemanpages.pl to update man pages
Steve Brokenshire [Fri, 7 Oct 2016 08:36:18 +0000 (09:36 +0100)]
maketgz: Run updatemanpages.pl to update man pages

maketgz now runs scripts/updatemanpages.pl to update the man pages .TH
section to use the current date and curl/libcurl version.

(TODO Section 3.1)

Closes #1058

7 years agogitignore: Ignore man page dist files
Steve Brokenshire [Sun, 26 Feb 2017 21:50:06 +0000 (21:50 +0000)]
gitignore: Ignore man page dist files

Ignore man page dist files generated by scripts/updatemanpages.pl

7 years agoMakefile.am: Remove distribution man pages when running 'make clean'
Steve Brokenshire [Sun, 26 Feb 2017 21:44:17 +0000 (21:44 +0000)]
Makefile.am: Remove distribution man pages when running 'make clean'

7 years agoMakefile.am: Added scripts/updatemanpages.pl to EXTRA_DIST
Steve Brokenshire [Fri, 7 Oct 2016 10:57:07 +0000 (11:57 +0100)]
Makefile.am: Added scripts/updatemanpages.pl to EXTRA_DIST

7 years agoupdatemanpages.pl: Update man pages to use current date and versions
Steve Brokenshire [Fri, 7 Oct 2016 08:35:32 +0000 (09:35 +0100)]
updatemanpages.pl: Update man pages to use current date and versions

Added script to update man pages to use the current date and
curl/libcurl versions.

updatemanpages.pl has three arrays: list of directories to look in,
list of extensions to process, list of files to exclude from
processing.

Check man page in git repoistory using the date from the existing man
page before updating to avoid updating the man page if no change is
made.

If data is received from the git command then update the man page with
the current date and version otherwise leave alone.

Applied patch from badger to make the date argument optional, change the
git command used, added date argument to processfile subroutine and
print to STDERR if no date is found in a man page.

Added code to process the changed man page into a new man page with
.dist added to the filename to keep the original source files unchanged.
Updated POD documentation to reflect that the date argument optional.

Code style is in line with CODE_STYLE.md.

Directories: docs/ docs/libcurl/ docs/libcurl/opts/ tests/
Extensions: .1 .3
Excluded files: mk-ca-bundle.1 template.3

(TODO Section 3.1)

7 years agohttp2: Fix assertion error on redirect with CL=0
Tatsuhiro Tsujikawa [Fri, 3 Mar 2017 12:44:01 +0000 (21:44 +0900)]
http2: Fix assertion error on redirect with CL=0

This fixes assertion error which occurs when redirect is done with 0
length body via HTTP/2, and the easy handle is reused, but new
connection is established due to hostname change:

    curl: http2.c:1572: ssize_t http2_recv(struct connectdata *,
      int, char *, size_t, CURLcode *):
    Assertion `httpc->drain_total >= data->state.drain' failed.

To fix this bug, ensure that http2_handle_stream is called.

Fixes #1286
Closes #1302

7 years agoares: Curl_resolver_wait_resolv: clear *entry first in function
Daniel Stenberg [Tue, 7 Mar 2017 07:08:55 +0000 (08:08 +0100)]
ares: Curl_resolver_wait_resolv: clear *entry first in function

7 years agoares: better error return on timeouts
Daniel Stenberg [Mon, 6 Mar 2017 21:45:10 +0000 (22:45 +0100)]
ares: better error return on timeouts

Assisted-by: Ray Satiro
Bug: https://curl.haxx.se/mail/lib-2017-03/0009.html

7 years agoKNOWN_BUGS: Add DarwinSSL won't import PKCS#12 without a password
Jay Satiro [Tue, 7 Mar 2017 00:13:03 +0000 (19:13 -0500)]
KNOWN_BUGS: Add DarwinSSL won't import PKCS#12 without a password

Bug: https://github.com/curl/curl/issues/1308
Reported-by: Justin Clift
7 years agotest1260: removed errant XML tag
Dan Fandrich [Mon, 6 Mar 2017 22:05:51 +0000 (23:05 +0100)]
test1260: removed errant XML tag

7 years agoURL: return error on malformed URLs with junk after port number
Daniel Stenberg [Mon, 6 Mar 2017 15:08:21 +0000 (16:08 +0100)]
URL: return error on malformed URLs with junk after port number

... because it causes confusion with users. Example URLs:

"http://[127.0.0.1]:11211:80" which a lot of languages' URL parsers will
parse and claim uses port number 80, while libcurl would use port number
11211.

"http://user@example.com:80@localhost" which by the WHATWG URL spec will
be treated to contain user name 'user@example.com' but according to
RFC3986 is user name 'user' for the host 'example.com' and then port 80
is followed by "@localhost"

Both these formats are now rejected, and verified so in test 1260.

Reported-by: Orange Tsai
7 years agoBINDINGS: update the Lua-cURL URL
Daniel Stenberg [Mon, 6 Mar 2017 11:57:33 +0000 (12:57 +0100)]
BINDINGS: update the Lua-cURL URL

7 years agoBINDINGS: add Scilab binding
Sylvestre Ledru [Mon, 6 Mar 2017 11:49:44 +0000 (12:49 +0100)]
BINDINGS: add Scilab binding

Closes #1312

7 years agoBINDINGS: add go-curl and perl6-net-curl
Daniel Stenberg [Mon, 6 Mar 2017 09:10:28 +0000 (10:10 +0100)]
BINDINGS: add go-curl and perl6-net-curl

Reported-by: Peter Pentchev
7 years agoBINDINGS: add misssing C++ bindings
Daniel Stenberg [Mon, 6 Mar 2017 08:43:54 +0000 (09:43 +0100)]
BINDINGS: add misssing C++ bindings

Reported-by: Giuseppe Persico
7 years agoares: return error at once if timed out before name resolve starts
Daniel Stenberg [Mon, 6 Mar 2017 08:21:01 +0000 (09:21 +0100)]
ares: return error at once if timed out before name resolve starts

Pointed-out-by: Ray Satiro
Bug: https://curl.haxx.se/mail/lib-2017-03/0004.html

7 years agoCMake: Set at most one SSL library
Michael Maltese [Tue, 21 Feb 2017 00:33:53 +0000 (16:33 -0800)]
CMake: Set at most one SSL library

Ref: https://github.com/curl/curl/pull/1228

7 years agoCMake: Add mbedTLS support
Michael Maltese [Thu, 26 Jan 2017 00:41:40 +0000 (16:41 -0800)]
CMake: Add mbedTLS support

Ref: https://github.com/curl/curl/pull/1228

7 years agoCMake: Add DarwinSSL support
Michael Maltese [Thu, 26 Jan 2017 00:05:07 +0000 (16:05 -0800)]
CMake: Add DarwinSSL support

Assisted-by: Simon Warta <simon@kullo.net>
Ref: https://github.com/curl/curl/pull/1228

7 years agoCMake: Reorganize SSL support, separate WinSSL and SSPI
Michael Maltese [Thu, 26 Jan 2017 00:35:54 +0000 (16:35 -0800)]
CMake: Reorganize SSL support, separate WinSSL and SSPI

This is closer to how configure.ac does it

Ref: https://github.com/curl/curl/pull/1228

7 years agoCURLOPT_SSL_CTX_FUNCTION.3: Fix EXAMPLE formatting errors
Jay Satiro [Sat, 4 Mar 2017 21:07:07 +0000 (16:07 -0500)]
CURLOPT_SSL_CTX_FUNCTION.3: Fix EXAMPLE formatting errors

.. also document that CURLE_NOT_BUILT_IN is a RETURN VALUE.

Ref: https://github.com/curl/curl/pull/1290

7 years agofix potential use of uninitialized variables
Andrew Krieger [Sat, 4 Mar 2017 00:17:24 +0000 (16:17 -0800)]
fix potential use of uninitialized variables

MSVC with LTCG detects this at warning level 4.

Closes #1304

7 years agofix some typos in the doc (#1306)
Sylvestre Ledru [Sat, 4 Mar 2017 14:50:33 +0000 (15:50 +0100)]
fix some typos in the doc (#1306)

7 years agotests: fixed a typo in some comments
Dan Fandrich [Sat, 4 Mar 2017 11:50:30 +0000 (12:50 +0100)]
tests: fixed a typo in some comments

7 years agourl: split off proxy init and parsing from create_conn
Jay Satiro [Mon, 27 Feb 2017 20:36:16 +0000 (15:36 -0500)]
url: split off proxy init and parsing from create_conn

Move the proxy parse/init into helper create_conn_helper_init_proxy to
mitigate the chances some non-proxy code will be mistakenly added to it.

Ref: https://github.com/curl/curl/issues/1274#issuecomment-281556510
Ref: https://github.com/curl/curl/pull/1293

Closes https://github.com/curl/curl/pull/1298

7 years agobuild: fix gcc7 implicit fallthrough warnings
Alexis La Goutte [Tue, 28 Feb 2017 21:45:28 +0000 (22:45 +0100)]
build: fix gcc7 implicit fallthrough warnings

Mark intended fallthroughs with /* FALLTHROUGH */ so that gcc will know
it's expected and won't warn on [-Wimplicit-fallthrough=].

Closes https://github.com/curl/curl/pull/1297

7 years agoconfigure: fix --with-zlib when a path is specified
Greg Rowe [Sun, 26 Feb 2017 22:39:12 +0000 (17:39 -0500)]
configure: fix --with-zlib when a path is specified

Prior to this change if you attempted to configure curl using
--wtih-zlib and specified a path the path would be ignored if you also
had pkg-config installed on your system.  This situation can easily
arise when you are cross compiling.  This change moves the test for
detecting zlib settings via pkg-config only if OPT_ZLIB is not set.

Closes https://github.com/curl/curl/pull/1292

7 years agono-keepalive.d: fix typo
c4rlo [Thu, 2 Mar 2017 20:46:00 +0000 (20:46 +0000)]
no-keepalive.d: fix typo

Closes https://github.com/curl/curl/pull/1301

7 years agochecksrc.bat: Ignore curl_config.h.in, curl_config.h
Jay Satiro [Thu, 2 Mar 2017 07:51:13 +0000 (02:51 -0500)]
checksrc.bat: Ignore curl_config.h.in, curl_config.h

7 years agoconfigure: fix for --enable-pthreads
Jay Satiro [Wed, 1 Mar 2017 08:11:36 +0000 (03:11 -0500)]
configure: fix for --enable-pthreads

Better handle options conflicts that can occur if --enable-pthreads.

Bug: https://github.com/curl/curl/pull/1295
Reported-by: Marc-Antoine Perennou
7 years agodarwinssl: Warn that disabling host verify also disables SNI
JDepooter [Thu, 2 Feb 2017 21:40:16 +0000 (13:40 -0800)]
darwinssl: Warn that disabling host verify also disables SNI

In DarwinSSL the SSLSetPeerDomainName function is used to enable both
sending SNI and verifying the host. When host verification is disabled
the function cannot be called, therefore SNI is disabled as well.

Closes https://github.com/curl/curl/pull/1240

7 years agowarnless: suppress compiler warning
Marcel Raad [Tue, 28 Feb 2017 08:08:00 +0000 (09:08 +0100)]
warnless: suppress compiler warning

If size_t is 32 bits, MSVC warns:
warning C4310: cast truncates constant value
The warning is harmless as CURL_MASK_SCOFFT gets
truncated to the maximum value of size_t.

7 years agotests: enable HTTP/2 tests to run with non-default port numbers
Dan Fandrich [Mon, 27 Feb 2017 21:32:07 +0000 (22:32 +0100)]
tests: enable HTTP/2 tests to run with non-default port numbers

7 years agodigest_sspi: fix compilation warning
Marcel Raad [Mon, 27 Feb 2017 12:05:22 +0000 (13:05 +0100)]
digest_sspi: fix compilation warning

MSVC complains:
warning C4701: potentially uninitialized local variable 'output_token_len' used

7 years agocyassl: get library version string at runtime
Jay Satiro [Sun, 26 Feb 2017 23:49:39 +0000 (18:49 -0500)]
cyassl: get library version string at runtime

wolfSSL >= 3.6.0 supports getting its library version string at runtime.

7 years agotest1139: allow for the possibility that the man page is not rebuilt
Dan Fandrich [Sun, 26 Feb 2017 20:30:31 +0000 (21:30 +0100)]
test1139: allow for the possibility that the man page is not rebuilt

This is likely to be the case when building from a tar ball release
package which includes a prebuilt man page. In that case, test the
packaged man page instead. This only makes a difference when building
out-of-tree (in-tree, the location in both cases is identical).

7 years agourl: fix unix-socket support for proxy-disabled builds
Isaac Boukris [Fri, 24 Feb 2017 09:28:08 +0000 (11:28 +0200)]
url: fix unix-socket support for proxy-disabled builds

Prior to this change if curl was built with Unix Socket support
(--enable-unix-sockets) and without Proxy support (--disable-proxy) then
unix socket options would erroneously be ignored.

Regression introduced in:
0b8d682f81ee9acb763dd4c9ad805fe08d1227c0

Bug: https://github.com/curl/curl/issues/1274
Reported-by: mccormickt12@users.noreply.github.com
Closes https://github.com/curl/curl/pull/1289

7 years agogopher: fixed detection of an error condition from Curl_urldecode
Dan Fandrich [Sat, 25 Feb 2017 23:10:30 +0000 (00:10 +0100)]
gopher: fixed detection of an error condition from Curl_urldecode

7 years agoftp: fixed a NULL pointer dereference on OOM
Dan Fandrich [Sat, 25 Feb 2017 21:55:46 +0000 (22:55 +0100)]
ftp: fixed a NULL pointer dereference on OOM

7 years agodocs: de-duplicate file lists in the Makefiles
Peter Wu [Sat, 25 Feb 2017 14:08:41 +0000 (15:08 +0100)]
docs: de-duplicate file lists in the Makefiles

Make use of macro substitution of suffix patterns to remove duplication
of manual names. This approach is portable according to
http://pubs.opengroup.org/onlinepubs/009695399/utilities/make.html

Closes https://github.com/curl/curl/pull/1287

7 years agoftp: removed an erroneous free in an OOM path
Dan Fandrich [Sat, 25 Feb 2017 20:47:27 +0000 (21:47 +0100)]
ftp: removed an erroneous free in an OOM path

7 years agoproxy: fixed a memory leak on OOM
Dan Fandrich [Sat, 25 Feb 2017 20:36:39 +0000 (21:36 +0100)]
proxy: fixed a memory leak on OOM

7 years agotests: use consistent environment variables for setting charset
Dan Fandrich [Thu, 23 Feb 2017 20:47:17 +0000 (21:47 +0100)]
tests: use consistent environment variables for setting charset

The character set in POSIX is set by the locale defined by (in
decreasing order of precedence) the LC_ALL, LC_CTYPE and LANG
environment variables (CHARSET was used by libidn but not libidn2).
LC_ALL is cleared to ensure that LC_CTYPE takes effect, but LC_ALL is
not used to set the locale to ensure that other parts of the locale
aren't overridden.  Since there doesn't seem to be a cross-platform way
of specifying a UTF-8 locale, and not all systems may support UTF-8, a
<precheck> is used to skip the test if UTF-8 can't be verified to be
available.  Test 1035 was also converted to UTF-8 for consistency, as
the actual character set used there is irrelevant to the test.

This patch uses a different UTF-8 locale than the last attempt, namely
en_US.UTF-8. This one has been verified on 7 different Linux and BSD
distributions and is more complete and usable than the locale UTF-8 (on
at least some systems).

7 years agotest557: explicitly use the C locale so the numeric output is as expected
Dan Fandrich [Sat, 25 Feb 2017 11:03:46 +0000 (12:03 +0100)]
test557: explicitly use the C locale so the numeric output is as expected

7 years agocmake: Replace invalid UTF-8 byte sequence
Simon Warta [Mon, 20 Feb 2017 22:07:58 +0000 (23:07 +0100)]
cmake: Replace invalid UTF-8 byte sequence

- Change the encoding of the regex temp placeholder token to UTF-8.

Prior to this change the file contained special chars in a different
encoding than ASCII or UTF-8 making text editors and Python complain
when reading the file.

Closes https://github.com/curl/curl/pull/1271
Closes https://github.com/curl/curl/pull/1275

7 years agobump: work on the next release
Daniel Stenberg [Fri, 24 Feb 2017 22:48:05 +0000 (23:48 +0100)]
bump: work on the next release

7 years agorelease: 7.53.1 curl-7_53_1
Daniel Stenberg [Thu, 23 Feb 2017 22:16:07 +0000 (23:16 +0100)]
release: 7.53.1

7 years agoRevert "tests: use consistent environment variables for setting charset"
Daniel Stenberg [Fri, 24 Feb 2017 07:41:36 +0000 (08:41 +0100)]
Revert "tests: use consistent environment variables for setting charset"

This reverts commit ecd1d020abdae3c3ce3643ddab3106501e62e7c0.

That commit caused test failures on my Debian Linux machine for all
changed test cases. We need to reconsider how that should get done.

7 years agotests: use consistent environment variables for setting charset
Dan Fandrich [Thu, 23 Feb 2017 20:47:17 +0000 (21:47 +0100)]
tests: use consistent environment variables for setting charset

Character set in POSIX is set by the locale defined (in decreasing order
of precedence) by the LC_ALL, LC_CTYPE and LANG environment variables (I
believe CHARSET is only historic). LC_ALL is cleared to ensure that
LC_CTYPE takes effect, but LC_ALL is not used to set the locale to
ensure that other parts of the locale aren't overriden, if set.  Since
there doesn't seem to be a cross-platform way of specifying a UTF-8
locale, and not all systems may support UTF-8, a <precheck> is used
(where relevant) to skip the test if UTF-8 isn't in use.  Test 1035 was
also converted to UTF-8 for consistency, as the actual character set
used there is irrelevant to the test.

7 years agourl: Default the CA proxy bundle location to CURL_CA_BUNDLE
Jay Satiro [Thu, 23 Feb 2017 22:06:11 +0000 (17:06 -0500)]
url: Default the CA proxy bundle location to CURL_CA_BUNDLE

If the compile-time CURL_CA_BUNDLE location is defined use it as the
default value for the proxy CA bundle location, which is the same as
what we already do for the regular CA bundle location.

Ref: https://github.com/curl/curl/pull/1257

7 years agorand: added missing #ifdef HAVE_FCNTL_H around fcntl.h header
Sergii Pylypenko [Thu, 23 Feb 2017 20:07:04 +0000 (22:07 +0200)]
rand: added missing #ifdef HAVE_FCNTL_H around fcntl.h header

Closes #1285

7 years agoTODO: "OPTIONS *"
Daniel Stenberg [Thu, 23 Feb 2017 15:58:21 +0000 (16:58 +0100)]
TODO: "OPTIONS *"

Closes #1280

7 years agoRELEASE-NOTES: synced with 443e5b03a7d441
Daniel Stenberg [Thu, 23 Feb 2017 10:21:44 +0000 (11:21 +0100)]
RELEASE-NOTES: synced with 443e5b03a7d441

7 years agoTHANKS-filter: shachaf
Daniel Stenberg [Thu, 23 Feb 2017 10:21:19 +0000 (11:21 +0100)]
THANKS-filter: shachaf

7 years agotests: Set CHARSET & LANG to UTF-8 in 1035, 2046 and 2047
İsmail Dönmez [Thu, 23 Feb 2017 09:24:42 +0000 (10:24 +0100)]
tests: Set CHARSET & LANG to UTF-8 in 1035, 2046 and 2047

Closes #1283
Fixes #1277

7 years agobump: 7.53.1 coming up
Daniel Stenberg [Thu, 23 Feb 2017 09:47:10 +0000 (10:47 +0100)]
bump: 7.53.1 coming up

synced with df665f4df0f7a352

7 years agoformdata: check for EOF when reading from stdin
Daniel Stenberg [Thu, 23 Feb 2017 09:41:20 +0000 (10:41 +0100)]
formdata: check for EOF when reading from stdin

Reported-by: shachaf@users.noreply.github.com
Fixes #1281

7 years agodocs: gitignore curl.1
Jay Satiro [Wed, 22 Feb 2017 19:08:29 +0000 (14:08 -0500)]
docs: gitignore curl.1

curl.1 is generated by the cmdline-opts script since 4c49b83.

7 years agoTODO: HTTP Digest using SHA-256
Daniel Stenberg [Wed, 22 Feb 2017 13:16:45 +0000 (14:16 +0100)]
TODO: HTTP Digest using SHA-256

7 years agoTODO: brotli is deployed widely now
Daniel Stenberg [Wed, 22 Feb 2017 09:59:47 +0000 (10:59 +0100)]
TODO: brotli is deployed widely now

7 years agourldata: include curl_sspi.h when Windows SSPI is enabled
Viktor Szakats [Wed, 22 Feb 2017 04:01:37 +0000 (23:01 -0500)]
urldata: include curl_sspi.h when Windows SSPI is enabled

f77dabe broke builds in Windows using Windows SSPI but not Windows SSL.

Bug: https://github.com/curl/curl/issues/1276
Reported-by: jveazey@users.noreply.github.com
7 years agourl: Improve CURLOPT_PROXY_CAPATH error handling
Jay Satiro [Wed, 22 Feb 2017 03:21:17 +0000 (22:21 -0500)]
url: Improve CURLOPT_PROXY_CAPATH error handling

- Change CURLOPT_PROXY_CAPATH to return CURLE_NOT_BUILT_IN if the option
  is not supported, which is the same as what we already do for
  CURLOPT_CAPATH.

- Change the curl tool to handle CURLOPT_PROXY_CAPATH error
  CURLE_NOT_BUILT_IN as a warning instead of as an error, which is the
  same as what we already do for CURLOPT_CAPATH.

- Fix CAPATH docs to show that CURLE_NOT_BUILT_IN is returned when the
  respective CAPATH option is not supported by the SSL library.

Ref: https://github.com/curl/curl/pull/1257

7 years agocyassl: fix typo
Jay Satiro [Tue, 21 Feb 2017 22:00:17 +0000 (17:00 -0500)]
cyassl: fix typo

7 years agorelease: 7.53.0 curl-7_53_0
Daniel Stenberg [Tue, 21 Feb 2017 08:18:18 +0000 (09:18 +0100)]
release: 7.53.0

7 years agocookie: fix declaration of 'dup' shadows a global declaration
Daniel Stenberg [Tue, 21 Feb 2017 16:44:02 +0000 (17:44 +0100)]
cookie: fix declaration of 'dup' shadows a global declaration

7 years agoTLS: make SSL_VERIFYSTATUS work again
Daniel Stenberg [Sun, 22 Jan 2017 17:11:55 +0000 (18:11 +0100)]
TLS: make SSL_VERIFYSTATUS work again

The CURLOPT_SSL_VERIFYSTATUS option was not properly handled by libcurl
and thus even if the status couldn't be verified, the connection would
be allowed and the user would not be told about the failed verification.

Regression since cb4e2be7c6d42ca

CVE-2017-2629
Bug: https://curl.haxx.se/docs/adv_20170222.html

Reported-by: Marcus Hoffmann
7 years agodigest_sspi: Handle 'stale=TRUE' directive in HTTP digest
Jay Satiro [Tue, 26 Jul 2016 05:46:23 +0000 (01:46 -0400)]
digest_sspi: Handle 'stale=TRUE' directive in HTTP digest

- If the server has provided another challenge use it as the replacement
  input token if stale=TRUE. Otherwise previous credentials have failed
  so return CURLE_LOGIN_DENIED.

Prior to this change the stale directive was ignored and if another
challenge was received it would cause error CURLE_BAD_CONTENT_ENCODING.

Ref: https://tools.ietf.org/html/rfc2617#page-10

Bug: https://github.com/curl/curl/issues/928
Reported-by: tarek112@users.noreply.github.com
7 years agosmb: use getpid replacement for windows UWP builds
Daniel Stenberg [Mon, 20 Feb 2017 09:27:51 +0000 (10:27 +0100)]
smb: use getpid replacement for windows UWP builds

Source: https://github.com/Microsoft/vcpkg/blob/7676b8780db1e1e591c4fc7eba4f96f73c428cb4/ports/curl/0002_fix_uwp.patch

7 years agoTODO: CURLOPT_RESOLVE for any port number
Daniel Stenberg [Mon, 20 Feb 2017 08:14:05 +0000 (09:14 +0100)]
TODO: CURLOPT_RESOLVE for any port number

Closes #1264

7 years agoRELEASE-NOTES: synced with af30f1152d43dcdb
Daniel Stenberg [Mon, 20 Feb 2017 07:11:17 +0000 (08:11 +0100)]
RELEASE-NOTES: synced with af30f1152d43dcdb

7 years agosftp: improved checks for create dir failures
Jean Gressmann [Sun, 19 Feb 2017 10:02:15 +0000 (11:02 +0100)]
sftp: improved checks for create dir failures

Since negative values are errors and not only -1. This makes SFTP upload
with --create-dirs work (again).

Closes #1269

7 years agodigest_sspi: Fix nonce-count generation in HTTP digest
Max Khon [Mon, 6 Feb 2017 17:40:51 +0000 (23:40 +0600)]
digest_sspi: Fix nonce-count generation in HTTP digest

- on the first invocation: keep security context returned by
  InitializeSecurityContext()

- on subsequent invocations: use MakeSignature() instead of
  InitializeSecurityContext() to generate HTTP digest response

Bug: https://github.com/curl/curl/issues/870
Reported-by: Andreas Roth
Closes https://github.com/curl/curl/pull/1251

7 years agoexamples/multi-uv: checksrc compliance
Jay Satiro [Mon, 20 Feb 2017 05:52:16 +0000 (00:52 -0500)]
examples/multi-uv: checksrc compliance

7 years agostring formatting: fix 4 printf-style format strings
Michael Kaufmann [Sun, 19 Feb 2017 13:10:54 +0000 (14:10 +0100)]
string formatting: fix 4 printf-style format strings

7 years agotests: removed the obsolete name parameter
Dan Fandrich [Sat, 18 Feb 2017 21:18:17 +0000 (22:18 +0100)]
tests: removed the obsolete name parameter

7 years agospeed caps: update the timeouts if the speed is too low/high
Michael Kaufmann [Sun, 29 Jan 2017 16:14:05 +0000 (17:14 +0100)]
speed caps: update the timeouts if the speed is too low/high

Follow-up to 4b86113

Fixes https://github.com/curl/curl/issues/793
Fixes https://github.com/curl/curl/issues/942

7 years agodocs: fix timeout handling in multi-uv example
Michael Kaufmann [Sun, 29 Jan 2017 16:06:49 +0000 (17:06 +0100)]
docs: fix timeout handling in multi-uv example

7 years agoproxy: fix hostname resolution and IDN conversion
Michael Kaufmann [Sat, 18 Feb 2017 12:56:56 +0000 (13:56 +0100)]
proxy: fix hostname resolution and IDN conversion

Properly resolve, convert and log the proxy host names.
Support the "--connect-to" feature for SOCKS proxies and for passive FTP
data transfers.

Follow-up to cb4e2be

Reported-by: Jay Satiro
Fixes https://github.com/curl/curl/issues/1248

7 years agohttp: fix missing 'Content-Length: 0' while negotiating auth
Isaac Boukris [Fri, 3 Feb 2017 12:30:26 +0000 (14:30 +0200)]
http: fix missing 'Content-Length: 0' while negotiating auth

- While negotiating auth during PUT/POST if a user-specified
  Content-Length header is set send 'Content-Length: 0'.

This is what we do already in HTTPREQ_POST_FORM and what we did in the
HTTPREQ_POST case (regression since afd288b).

Prior to this change no Content-Length header would be sent in such a
case.

Bug: https://curl.haxx.se/mail/lib-2017-02/0006.html
Reported-by: Dominik Hölzl
Closes https://github.com/curl/curl/pull/1242