Dan Fandrich [Mon, 17 Nov 2008 08:16:25 +0000 (08:16 +0000)]
Fixed an outdated mention of having keep strings around in curl_easy_setopt
calls. Added a paragraph explaining that libcurl takes care of low-level
protocol details. Made a few minor edits.
Daniel Stenberg [Sat, 15 Nov 2008 23:43:10 +0000 (23:43 +0000)]
based on a report by Jim Meyering, I went over and added checks for return
codes for all calls to malloc and strdup that were missing. I also changed
a few malloc(13) to use arrays on the stack and a few malloc(PATH_MAX) to
instead use aprintf() to lower memory use.
I also fixed a memory leak in Curl_nss_connect() when CURLOPT_ISSUERCERT is
in use.
Dan Fandrich [Fri, 14 Nov 2008 19:22:40 +0000 (19:22 +0000)]
Added .xml as one of the few common file extensions known by the multipart
form generator. Made the extensions part of the MIME type struct to reduce
the size and run-time relocations necessary to build the table.
Daniel Stenberg [Fri, 14 Nov 2008 16:42:05 +0000 (16:42 +0000)]
check for NULL returns from strdup() - reported by Jim Meyering
also prevent buffer overflow on MSDOS when you do for example -O on a url
with a file name part longer than PATH_MAX letters
Daniel Stenberg [Tue, 11 Nov 2008 22:19:27 +0000 (22:19 +0000)]
- Rainer Canavan filed bug #2255627
(http://curl.haxx.se/bug/view.cgi?id=2255627) which pointed out that a
program using libcurl's multi interface to download a HTTPS page with a
libcurl built powered by OpenSSL, would easily get silly and instead hand
over SSL details as data instead of the actual HTTP headers and body. This
happened because libcurl would consider the connection handshake done too
early. This problem was introduced at September 22nd 2008 with my fix of the
bug #2107377
The correct fix is now instead done within the GnuTLS-handling code, as both
the OpenSSL and the NSS code already deal with this situation in similar
fashion. I added test case 560 in an attempt to verify this fix, but
unfortunately it didn't trigger it even before this fix!
Daniel Stenberg [Tue, 11 Nov 2008 21:59:25 +0000 (21:59 +0000)]
Added test case 560:
This test was added after the HTTPS-using-multi-interface with OpenSSL
regression of 7.19.1 to hopefully prevent this embarassing mistake from
appearing again... Unfortunately the bug wasn't triggered by this test, which
presumably is because the connect to a local server is too fast/different
compared to the real/distant servers we saw the bug happen with.
Yang Tse [Tue, 11 Nov 2008 01:12:17 +0000 (01:12 +0000)]
Related with bug #2230535 (http://curl.haxx.se/bug/view.cgi?id=2230535)
Daniel Fandrich noticed that curl_addrinfo was also missing in the build
process of other four non-configure platforms. Added now.
Dan Fandrich [Fri, 7 Nov 2008 18:33:20 +0000 (18:33 +0000)]
The getifaddrs() version of Curl_if2ip() crashed when used on a Linux
system with a TEQL load-balancing device configured, which doesn't
have an address. Thanks to Adam Sampson for spotting this (bug #2234923).
Yang Tse [Thu, 6 Nov 2008 19:11:46 +0000 (19:11 +0000)]
Bug #2230535 (http://curl.haxx.se/bug/view.cgi?id=2230535) pointed out a
problem with MSVC 6 makefile that caused a build failure. It was noted that
the curl_addrinfo.obj reference was missing. I took the opportunity to sort
the list in which this was missing.
Daniel Stenberg [Mon, 3 Nov 2008 16:24:56 +0000 (16:24 +0000)]
- Bug #2218480 (http://curl.haxx.se/bug/view.cgi?id=2218480) pointed out a
problem with my CURLINFO_PRIMARY_IP fix from October 7th that caused a NULL
pointer read. I also took the opportunity to clean up this logic (storing of
the connection's IP address) somewhat as we had it stored in two different
places and ways previously and they are now unified.
Daniel Stenberg [Mon, 3 Nov 2008 08:50:58 +0000 (08:50 +0000)]
I liked Daniel Johnson's simplified version bumper guide so I modified the
instruction in the comments to use that instead! Original mail:
http://curl.haxx.se/mail/lib-2008-11/0019.html
Dan Fandrich [Sun, 2 Nov 2008 05:01:39 +0000 (05:01 +0000)]
Marked with TODO comments a number of problems in the Kerberos code detected
while investigating the issue in http://curl.haxx.se/mail/lib-2008-09/0262.html
I'm hesitant to fix them because I have no way of testing the result.
Daniel Stenberg [Sat, 1 Nov 2008 18:35:19 +0000 (18:35 +0000)]
- Carlo Contavalli added support for the glibc "rotate" option, as documented
in man resolv.conf:
causes round robin selection of nameservers from among those listed. This
has the effect of spreading the query load among all listed servers, rather
than having all clients try the first listed server first every time.
Yang Tse [Sat, 1 Nov 2008 16:52:57 +0000 (16:52 +0000)]
WIN32 availability of freeaddrinfo, getaddrinfo and getnameinfo functions is quite
convoluted, compiler dependant and in some cases even build target dependat.
Yang Tse [Thu, 30 Oct 2008 19:02:23 +0000 (19:02 +0000)]
Move curl_dofreeaddrinfo() and curl_dofreeaddrinfo()
implementation from lib/hostip6.c to lib/curl_addrinfo.c
and prototypes from lib/hostip.h to lib/curl_addrinfo.h