moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-11-04 08:35:05 -05:00
Code Issues Releases Wiki Activity
f2f07dad34
curl/RELEASE-NOTES

74 lines
3.2 KiB
Plaintext
Raw Normal View History

7.20.0 is the planned next version number
2009-11-27 18:53:50 -05:00
Curl and libcurl 7.20.0
working draft of the upcoming 7.10.8 release notes
2003-09-22 17:38:52 -04:00
start over towards 7.19.8
2009-11-04 08:11:43 -05:00
Public curl releases: 114
Mention -J change
2010-01-23 15:14:39 -05:00
Command line options: 136
Chris Conroy brought support for RTSP transfers, and with it comes 8(!) new libcurl options for controlling what to get and how to receive posssibly interleaved RTP data. Initial commit.
2010-01-21 08:58:30 -05:00
curl_easy_setopt() options: 174
- Introducing curl_easy_send() and curl_easy_recv(). They can be used to send and receive data over a connection previously setup with curl_easy_perform() and its CURLOPT_CONNECT_ONLY option. The sendrecv.c example was added to show how they can be used.
2008-05-12 17:43:24 -04:00
Public functions in libcurl: 58
a binding for Falcon
2009-11-29 14:12:00 -05:00
Known libcurl bindings: 39
start over towards 7.19.8
2009-11-04 08:11:43 -05:00
Contributors: 761
David Hull made the file: URL parser also accept the somewhat sloppy file syntax: file:/path. I added test case 203 to verify this.
2003-10-29 04:53:21 -05:00
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer.
2006-08-08 18:56:46 -04:00
This release includes the following changes:
mention the curl_off_t changes first
2008-09-01 10:27:24 -04:00
- Camille Moncelier added support for the file type SSL_FILETYPE_ENGINE for the client certificate. It also disable the key name test as some engines can select a private key/cert automatically (When there is only one key and/or certificate on the hardware device used by the engine)
2009-11-14 02:53:34 -05:00
o support SSL_FILETYPE_ENGINE for client certificate
Added '--configure' option to curl-config to display original configure arguments when curl was built
2009-11-14 14:23:26 -05:00
o curl-config can now show the arguments used when building curl
- Markus Koetter provided a polished and updated version of Chad Monroe's TFTP rework patch that now integrates TFTP properly into libcurl so that it can be used non-blocking with the multi interface and more. BLKSIZE also works. The --tftp-blksize option was added to allow setting the TFTP BLKSIZE from the command line.
2009-11-27 18:46:29 -05:00
o non-blocking TFTP
- Martin Storsjo made libcurl use the Expect: 100-continue header for posts with unknown size. Previously it was only used for posts with a known size larger than 1024 bytes.
2009-12-07 15:25:17 -05:00
o send Expect: 100-continue for POSTs with unknown sizes
Chris Conroy brought support for RTSP transfers, and with it comes 8(!) new libcurl options for controlling what to get and how to receive posssibly interleaved RTP data. Initial commit.
2010-01-21 08:58:30 -05:00
o added support for IMAP(S), POP3(S), SMTP(S) and RTSP
o added new curl_easy_setopt() options for SMTP and RTSP
IMAP, POP3 and SMTP support
2009-12-12 17:05:11 -05:00
o added --mail-from and --mail-rcpt for SMTP
VMS build system enhancements by Steven M. Schweda and Craig A. Berry
2009-12-30 14:37:53 -05:00
o VMS build system enhancements
- Ingmar Runge enhanced libcurl's FTP engine to support the PRET command. This command is a special "hack" used by the drftpd server, but even though it is a custom extension I've deemed it fine to add to libcurl since this server seems to survive and people keep using it and want libcurl to support it. The new libcurl option is named CURLOPT_FTP_USE_PRET, and it is also usable from the curl tool with --ftp-pret. Using this option on a server that doesn't support this command will make libcurl fail.
2010-01-01 09:44:44 -05:00
o added support for the PRET ftp command
- Make curl support --ssl and --ssl-reqd instead of the previous FTP-specific versions --ftp-ssl and --ftp-ssl-reqd as these options are now used to control SSL/TLS for IMAP, POP3 and SMTP as well in addition to FTP. The old option names are still working but the new ones are the prefered ones (listed and documented).
2010-01-02 17:09:31 -05:00
o curl supports --ssl and --ssl-reqd
Mention -J change
2010-01-23 15:14:39 -05:00
o added -J/--remote-header-name for using server-provided filename with -O
mention asynchronous DNS lookups enhancements
2010-01-27 13:10:35 -05:00
o enhanced asynchronous DNS lookups
- Symbol CURL_FORMAT_OFF_T now obsoleted, will be removed in a future release, symbol will not be available when building with CURL_NO_OLDIES defined. Use of CURL_FORMAT_CURL_OFF_T is preferred since 7.19.0
2010-02-02 07:58:49 -05:00
o symbol CURL_FORMAT_OFF_T is obsoleted
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer.
2006-08-08 18:56:46 -04:00
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
This release includes the following bugfixes:
- I fixed several problems with the transfer progress meter. It showed the wrong percentage for small files, most notable for <1000 bytes and could easily end up showing more than 100% at the end. It also didn't show any percentage, transfer size or estimated transfer times when transferring less than 100 bytes.
2009-11-04 18:09:17 -05:00
o progress meter percentage and transfer time estimates fixes
I removed leading 'curl' path on the 'curlbuild.h' include statement in curl.h, adjusting auto-makefiles include path, to enhance portability to OS's without an orthogonal directory tree structure such as OS/400.
2009-11-05 10:04:03 -05:00
o portability enhancement for OS's without orthogonal directory tree structure
- Christian Schmitz noticed that the progress meter/callback was not properly used during the FTP connection phase (after the actual TCP connect), while it of course should be. I also made the speed check get called correctly so that really slow servers will trigger that properly too.
2009-11-11 04:01:43 -05:00
o progress meter/callback during FTP connection
- Constantine Sapuntzakis posted bug #2891595 (http://curl.haxx.se/bug/view.cgi?id=2891595) which identified how an entry in the DNS cache would linger too long if the request that added it was in use that long. He also provided the patch that now makes libcurl capable of still doing a request while the DNS hash entry may get timed out.
2009-11-11 04:31:37 -05:00
o DNS cache timeout while transfer in progress
- Marco Maggi reported that compilation failed when configured --with-gssapi and GNU GSS installed due to a missing mutual exclusion of header files in the Kerberos 5 code path. He also verified that my patch worked for him.
2009-11-11 16:15:34 -05:00
o compilation when configured --with-gssapi having GNU GSS installed
- Constantine Sapuntzakis provided the fix that ensures that an SSL connection won't be reused unless protection level for peer and host verification match.
2009-11-13 21:30:30 -05:00
o SSL connection reused with mismatched protection level
- Claes Jakobsson restored the configure functionality to detect NSS when --with-nss is set but not "yes". I think we can still improve that to check for pkg-config in that path etc, but at least this patch brings back the same functionality we had before.
2009-11-14 04:13:47 -05:00
o configure --with-nss is set but not "yes"
- Marc Kleine-Budde fixed: curl saved the LDFLAGS set during configure into its pkg-config file. So -Wl stuff ended up in the .pc file, which is really bad, and breaks if there are multiple -Wl in our LDFLAGS (which are in PTXdist). bug #2893592 (http://curl.haxx.se/bug/view.cgi?id=2893592)
2009-11-17 13:11:06 -05:00
o don't store LDFLAGS in pkg-config file
- Constantine Sapuntzakis provided another fix for the DNS cache that could end up with entries that wouldn't time-out: 1. Set up a first web server that redirects (307) to a http://server:port that's down 2. Have curl connect to the first web server using curl multi After the curl_easy_cleanup call, there will be curl dns entries hanging around with in_use != 0. (http://curl.haxx.se/bug/view.cgi?id=2891591)
2009-11-17 17:53:55 -05:00
o never-pruned DNS cached entries
- Jad Chamcham pointed out a bug with connection re-use. If a connection had CURLOPT_HTTPPROXYTUNNEL enabled over a proxy, a subsequent request using the same proxy with the tunnel option disabled would still wrongly re-use that previous connection and the outcome would only be badness.
2009-11-20 08:27:21 -05:00
o HTTP proxy tunnel re-used connection even if tunnel got disabled
- Constantine Sapuntzakis identified a write after close, as the sockets were closed by libcurl before the SSL lib were shutdown and they may write to its socket. Detected to at least happen with OpenSSL builds.
2009-11-20 14:32:49 -05:00
o SSL lib post-close write
- Bjorn Augustsson reported a bug which made curl not report any problems even though it failed to write a very small download to disk (done in a single fwrite call). It turned out to be because fwrite() returned success, but there was insufficient error-checking for the fclose() call which tricked curl to believe things were fine.
2009-11-23 08:56:45 -05:00
o curl failed to report write errors for tiny failed downloads
- Markus Koetter provided a polished and updated version of Chad Monroe's TFTP rework patch that now integrates TFTP properly into libcurl so that it can be used non-blocking with the multi interface and more. BLKSIZE also works. The --tftp-blksize option was added to allow setting the TFTP BLKSIZE from the command line.
2009-11-27 18:46:29 -05:00
o TFTP BLKSIZE
- If the Expect: 100-continue header has been set by the application through curl_easy_setopt with CURLOPT_HTTPHEADER, the library should set data->state.expect100header accordingly - the current code (in 7.19.7 at least) doesn't handle this properly. Martin Storsjo provided the fix!
2009-12-01 07:04:54 -05:00
o Expect: 100-continue handling when set by the application
- Constantine Sapuntzakis figured out a case which would lead to libcurl accessing alredy freed memory and thus crash when using HTTPS (with OpenSSL), multi interface and the CURLOPT_DEBUGFUNCTION and a certain order of cleaning things up. I fixed it. (http://curl.haxx.se/bug/view.cgi?id=2891591)
2009-12-10 15:20:15 -05:00
o multi interface with OpenSSL read already freed memory when closing down
- Siegfried Gyuricsko found out that the curl manual said --retry would retry on FTP errors in the transient 5xx range. Transient FTP errors are in the 4xx range. The code itself only tried on 5xx errors that occured _at login_. Now the retry code retries on all FTP transfer failures that ended with a 4xx response. (http://curl.haxx.se/bug/view.cgi?id=2911279)
2009-12-10 16:02:11 -05:00
o --retry didn't do right for FTP transient errors
- Jon Nelson found a regression that turned out to be a flaw in how libcurl detects and uses proxies based on the environment variables. If the proxy was given as an explicit option it worked, but due to the setup order mistake proxies would not be used fine for a few protocols when picked up from '[protocol]_proxy'. Obviously this broke after 7.19.4. I now also added test case 1106 that verifies this functionality. (http://curl.haxx.se/bug/view.cgi?id=2913886)
2009-12-14 18:16:09 -05:00
o some *_proxy environment variables didn't function
- David Byron fixed Curl_ossl_cleanup to actually call ENGINE_cleanup when available.
2009-12-17 08:29:41 -05:00
o libcurl-OpenSSL engine cleanup
- Renato Botelho and Peter Pentchev brought a patch that makes the libcurl headers work correctly even on FreeBSD systems before v8.
2009-12-25 18:32:01 -05:00
o header include fix for FreeBSD versions before v8
Julien Chaffraix fixed so that the fragment part in an URL is not sent to the server anymore
2010-01-06 11:01:48 -05:00
o fragment part of URLs are no longer sent to the server
- Make sure the progress callback is called repeatedly even during very slow name resolves when c-ares is used for resolving.
2010-01-06 18:04:17 -05:00
o progress callback called repeatedly with c-ares for resolving
- Johan van Selst found and fixed a OpenSSL session ref count leak: ossl_connect_step3() increments an SSL session handle reference counter on each call. When sessions are re-used this reference counter may be incremented many times, but it will be decremented only once when done (by Curl_ossl_session_free()); and the internal OpenSSL data will not be freed if this reference count remains positive. When a session is re-used the reference counter should be corrected by explicitly calling SSL_SESSION_free() after each consecutive SSL_get1_session() to avoid introducing a memory leak. (http://curl.haxx.se/bug/view.cgi?id=2926284)
2010-01-08 18:45:23 -05:00
o OpenSSL session id ref count leak
progress callback called repeatedly during slow connects
2010-01-11 16:38:35 -05:00
o progress callback called repeatedly during slow connects
- Gil Weber reported a peculiar flaw with the multi interface when doing SFTP transfers: curl_multi_fdset() would return -1 and not set and file descriptors several times during a transfer of a single file. It turned out to be due to two different flaws now fixed. Gil's excellent recipe helped me nail this.
2010-01-11 18:15:10 -05:00
o curl_multi_fdset() would return -1 too often during SCP/SFTP transfers
- David McCreedy brought a fix and a new test case (129) to make libcurl work again when downloading files over FTP using ASCII and it turns out that the final size of the file is not the same as the initial size the server reported. This is very common since servers don't take the newline conversions into account.
2010-01-19 16:39:10 -05:00
o FTP file size checks with ASCII transfers
- As was pointed out on the http-state mailing list, the order of cookies in a HTTP Cookie: header _needs_ to be sorted on the path length in the cases where two cookies using the same name are set more than once using (overlapping) paths. Realizing this, identically named cookies must be sorted correctly. But detecting only identically named cookies and take care of them individually is harder than just to blindly and unconditionally sort all cookies based on their path lengths. All major browsers also already do this, so this makes our behavior one step closer to them in the cookie area. Test case 8 was the only one that broke due to this change and I updated it accordingly.
2010-01-19 18:19:59 -05:00
o HTTP Cookie: headers sort cookies based on specified path lengths
We introduce a loop in lib/multi.c around all calls to multi_runsingle() and simply check for CURLM_CALL_MULTI_PERFORM internally. This has the added benefit that this goes in line with my long-term wishes to get rid of the CURLM_CALL_MULTI_PERFORM all together from the public API.
2010-02-01 16:42:44 -05:00
o CURLM_CALL_MULTI_PERFORM fix for multi socket timeout calls
- When downloading compressed content over HTTP and the app as asked libcurl to automatically uncompress it with the CURLOPT_ENCODING option, libcurl could wrongly provide the callback with more data than what the maximum documented amount. An application could thus get tricked into badness if the maximum limit was trusted to be enforced by libcurl itself (as it is documented). This is further detailed and explained in the libcurl security advisory 20100209 at http://curl.haxx.se/docs/adv_20100209.html
2010-02-09 04:35:48 -05:00
o libcurl data callback excessive length:
http://curl.haxx.se/docs/adv_20100209.html
HTTP Digest auth fix on a re-used connection
2007-07-22 06:17:52 -04:00
This release includes the following known bugs:
o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)
This release would not have looked like this without help, code, reports and
advice from friends like these:
Add last change credit
2009-11-11 16:19:49 -05:00
Yang Tse, Kamil Dudka, Christian Schmitz, Constantine Sapuntzakis,
- Marc Kleine-Budde fixed: curl saved the LDFLAGS set during configure into its pkg-config file. So -Wl stuff ended up in the .pc file, which is really bad, and breaks if there are multiple -Wl in our LDFLAGS (which are in PTXdist). bug #2893592 (http://curl.haxx.se/bug/view.cgi?id=2893592)
2009-11-17 13:11:06 -05:00
Marco Maggi, Camille Moncelier, Claes Jakobsson, Kevin Baughman,
- Markus Koetter provided a polished and updated version of Chad Monroe's TFTP rework patch that now integrates TFTP properly into libcurl so that it can be used non-blocking with the multi interface and more. BLKSIZE also works. The --tftp-blksize option was added to allow setting the TFTP BLKSIZE from the command line.
2009-11-27 18:46:29 -05:00
Marc Kleine-Budde, Jad Chamcham, Bjorn Augustsson, David Byron,
- Jon Nelson found a regression that turned out to be a flaw in how libcurl detects and uses proxies based on the environment variables. If the proxy was given as an explicit option it worked, but due to the setup order mistake proxies would not be used fine for a few protocols when picked up from '[protocol]_proxy'. Obviously this broke after 7.19.4. I now also added test case 1106 that verifies this functionality. (http://curl.haxx.se/bug/view.cgi?id=2913886)
2009-12-14 18:16:09 -05:00
Markus Koetter, Chad Monroe, Martin Storsjo, Siegfried Gyuricsko,
- Johan van Selst found and fixed a OpenSSL session ref count leak: ossl_connect_step3() increments an SSL session handle reference counter on each call. When sessions are re-used this reference counter may be incremented many times, but it will be decremented only once when done (by Curl_ossl_session_free()); and the internal OpenSSL data will not be freed if this reference count remains positive. When a session is re-used the reference counter should be corrected by explicitly calling SSL_SESSION_free() after each consecutive SSL_get1_session() to avoid introducing a memory leak. (http://curl.haxx.se/bug/view.cgi?id=2926284)
2010-01-08 18:45:23 -05:00
Jon Nelson, Julien Chaffraix, Renato Botelho, Peter Pentchev, Ingmar Runge,
Mention -J change
2010-01-23 15:14:39 -05:00
Johan van Selst, Charles Kerr, Gil Weber, David McCreedy, Chris Conroy,
- When downloading compressed content over HTTP and the app as asked libcurl to automatically uncompress it with the CURLOPT_ENCODING option, libcurl could wrongly provide the callback with more data than what the maximum documented amount. An application could thus get tricked into badness if the maximum limit was trusted to be enforced by libcurl itself (as it is documented). This is further detailed and explained in the libcurl security advisory 20100209 at http://curl.haxx.se/docs/adv_20100209.html
2010-02-09 04:35:48 -05:00
Bjorn Stenberg, Mike Crowe, Joshua Kwan, Daniel Fandrich, Wesley Miaw
start over on 7.18.1
2008-01-28 16:19:15 -05:00
working draft of the upcoming 7.10.8 release notes
2003-09-22 17:38:52 -04:00
Thanks! (and sorry if I forgot to mention someone)
Reference in New Issue Copy Permalink