moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-21 23:58:49 -05:00
Code Issues Releases Wiki Activity

RELEASE-NOTES: synced with af8cc7a69

Browse Source
This commit is contained in:
Daniel Stenberg 2017-12-01 10:37:05 +01:00
parent af8cc7a693
commit 3973ee6a65
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 13 additions and 139 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

152
RELEASE-NOTES
View File

@ -1,6 +1,6 @@
Curl and libcurl 7.57.0
Curl and libcurl 7.57.1
Public curl releases: 171
Public curl releases: 172
Command line options: 211
curl_easy_setopt() options: 249
Public functions in libcurl: 74
@ -8,81 +8,14 @@ Curl and libcurl 7.57.0
This release includes the following changes:
o auth: add support for RFC7616 - HTTP Digest access authentication [12]
o share: add support for sharing the connection cache [31]
o HTTP: implement Brotli content encoding [28]
o
This release includes the following bugfixes:
o CVE-2017-8816: NTLM buffer overflow via integer overflow [47]
o CVE-2017-8817: FTP wildcard out of bounds read [48]
o CVE-2017-8818: SSL out of buffer access [49]
o curl_mime_filedata.3: fix typos [1]
o libtest: Add required test libraries for lib1552 and lib1553 [2]
o fix time diffs for systems using unsigned time_t [3]
o ftplistparser: memory leak fix: free temporary memory always [4]
o multi: allow table handle sizes to be overridden [5]
o wildcards: don't use with non-supported protocols [6]
o curl_fnmatch: return error on illegal wildcard pattern [7]
o transfer: Fix chunked-encoding upload too early exit [8]
o curl_setup: Improve detection of CURL_WINDOWS_APP [9]
o resolvers: only include anything if needed [10]
o setopt: fix CURLOPT_SSH_AUTH_TYPES option read
o appveyor: add a win32 build
o Curl_timeleft: change return type to timediff_t [11]
o cmake: Export libcurl and curl targets to use by other cmake projects [13]
o curl: in -F option arg, comma is a delimiter for files only [14]
o curl: improved ";type=" handling in -F option arguments
o timeval: use mach_absolute_time() on MacOS [15]
o curlx: the timeval functions are no longer provided as curlx_* [16]
o mkhelp.pl: do not generate comment with current date [17]
o memdebug: use send/recv signature for curl_dosend/curl_dorecv [18]
o cookie: avoid NULL dereference [19]
o url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1 [20]
o include: remove conncache.h inclusion from where its not needed
o CURLOPT_MAXREDIRS: allow -1 as a value [21]
o tests: Fixed torture tests on tests 556 and 650
o http2: Fixed OOM handling in upgrade request
o url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
o CURLOPT_INFILESIZE: accept -1 [22]
o curl: pass through [] in URLs instead of calling globbing error [23]
o curl: speed up handling of many URLs [24]
o ntlm: avoid malloc(0) for zero length passwords [25]
o url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES [26]
o HTTP: support multiple Content-Encodings [27]
o travis: add a job with brotli enabled
o url: remove unncessary NULL-check
o fnmatch: remove dead code
o connect: store IPv6 connection status after valid connection [29]
o imap: deal with commands case insensitively [30]
o --interface: add support for Linux VRF [32]
o content_encoding: fix inflate_stream for no bytes available [33]
o cmake: Correctly include curl.rc in Windows builds [34]
o cmake: Add missing setmode check [35]
o connect.c: remove executable bit on file [36]
o SMB: fix uninitialized local variable
o zlib/brotli: only include header files in modules needing them [37]
o URL: return error on malformed URLs with junk after IPv6 bracket [38]
o openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY [39]
o macOS: Fix missing connectx function with Xcode version older than 9.0 [40]
o --resolve: allow IP address within [] brackets [41]
o examples/curlx: Fix code style [42]
o ntlm: remove unnecessary NULL-check to please scan-build [43]
o Curl_llist_remove: fix potential NULL pointer deref [43]
o mime: fix "Value stored to 'sz' is never read" scan-build error [43]
o openssl: fix "Value stored to 'rc' is never read" scan-build error [43]
o http2: fix "Value stored to 'hdbuf' is never read" scan-build error [43]
o http2: fix "Value stored to 'end' is never read" scan-build error [43]
o Curl_open: fix OOM return error correctly [43]
o url: reject ASCII control characters and space in host names [44]
o examples/rtsp: clear RANGE again after use [45]
o connect: improve the bind error message [46]
o make: fix "make distclean" [50]
o connect: add support for new TCP Fast Open API on Linux [51]
o metalink: fix memory-leak and NULL pointer dereference [52]
o URL: update "file:" URL handling [53]
o ssh: remove check for a NULL pointer [54]
o global_init: ignore CURL_GLOBAL_SSL's absense [55]
o travis: add boringssl build [1]
o examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL [2]
o SSL: Avoid magic allocation of SSL backend specific data [3]
o lib: don't export all symbols, just everything curl_* [4]
This release includes the following known bugs:
@ -91,73 +24,14 @@ This release includes the following known bugs:
This release would not have looked like this without help, code, reports and
advice from friends like these:
Alessandro Ghedini, Alex Malinovich, Alex Nichols, Alfonso Martone,
Andrew Lambert, arainchik on github, Brian Carpenter, cbartl on github,
Dan Fandrich, Daniel Bankhead, Daniel Stenberg, Dirk Feytons,
Dmitri Tikhonov, Evgeny Grin, Gisle Vanem, hsiao yi, Jakub Zakrzewski,
John Starks, Juro Bystricky, Kamil Dudka, Luca Boccassi, Marcel Raad,
Martin Storsjö, Matthew Kerwin, Max Dymond, Michael Felt, Michael Kaufmann,
moohoorama on github, omau on github, Orgad Shaneh, Patrick Monnerat,
Paul Howarth, Pavel Gushchin, Pavol Markovic, Per Lundberg, Peter Piekarski,
Petr Voytsik, Ray Satiro, Rob Cotrone, Viktor Szakáts, youngchopin on github,
(41 contributors)
Daniel Stenberg, Dima Tisnek, Johannes Schindelin, W. Mark Kubacki,
(4 contributors)
Thanks! (and sorry if I forgot to mention someone)
References to bug reports and discussions on issues:
[1] = https://curl.haxx.se/bug/?i=2008
[2] = https://curl.haxx.se/bug/?i=2006
[3] = https://curl.haxx.se/bug/?i=2004
[4] = https://curl.haxx.se/bug/?i=2013
[5] = https://curl.haxx.se/bug/?i=1982
[6] = https://curl.haxx.se/bug/?i=2016
[7] = https://curl.haxx.se/bug/?i=2015
[8] = https://curl.haxx.se/bug/?i=2001
[9] = https://curl.haxx.se/bug/?i=2025
[10] = https://curl.haxx.se/bug/?i=2023
[11] = https://curl.haxx.se/bug/?i=2021
[12] = https://curl.haxx.se/bug/?i=1934
[13] = https://curl.haxx.se/bug/?i=1879
[14] = https://curl.haxx.se/bug/?i=2022
[15] = https://curl.haxx.se/bug/?i=2033
[16] = https://curl.haxx.se/bug/?i=2034
[17] = https://curl.haxx.se/bug/?i=2026
[18] = https://curl.haxx.se/bug/?i=2031
[19] = https://curl.haxx.se/bug/?i=2032
[20] = https://curl.haxx.se/mail/lib-2017-11/0000.html
[21] = https://curl.haxx.se/bug/?i=2038
[22] = https://curl.haxx.se/bug/?i=2047
[23] = https://curl.haxx.se/bug/?i=2044
[24] = https://curl.haxx.se/bug/?i=1959
[25] = https://curl.haxx.se/bug/?i=2054
[26] = https://github.com/curl/curl/commit/f121575#commitcomment-25347120
[27] = https://curl.haxx.se/bug/?i=2002
[28] = https://curl.haxx.se/bug/?i=2045
[29] = https://curl.haxx.se/bug/?i=2053
[30] = https://curl.haxx.se/bug/?i=2061
[31] = https://curl.haxx.se/bug/?i=2043
[32] = https://curl.haxx.se/bug/?i=2024
[33] = https://curl.haxx.se/bug/?i=2060
[34] = https://curl.haxx.se/bug/?i=2064
[35] = https://curl.haxx.se/bug/?i=2067
[36] = https://curl.haxx.se/bug/?i=2071
[37] = https://curl.haxx.se/mail/lib-2017-11/0032.html
[38] = https://curl.haxx.se/bug/?i=2072
[39] = https://curl.haxx.se/bug/?i=2079
[40] = https://curl.haxx.se/bug/?i=2080
[41] = https://curl.haxx.se/bug/?i=2087
[42] = https://curl.haxx.se/bug/?i=2096
[43] = https://curl.haxx.se/bug/?i=2098
[44] = https://curl.haxx.se/bug/?i=2073
[45] = https://curl.haxx.se/bug/?i=2106
[46] = https://curl.haxx.se/bug/?i=2104
[47] = https://curl.haxx.se/docs/adv_2017-11e7.html
[48] = https://curl.haxx.se/docs/adv_2017-ae72.html
[49] = https://curl.haxx.se/docs/adv_2017-af0a.html
[50] = https://curl.haxx.se/bug/?i=2097
[51] = https://curl.haxx.se/bug/?i=2056
[52] = https://curl.haxx.se/bug/?i=2109
[53] = https://curl.haxx.se/bug/?i=2110
[54] = https://curl.haxx.se/bug/?i=2111
[55] = https://curl.haxx.se/bug/?i=2083
[1] = https://curl.haxx.se/bug/?i=2118
[2] = https://curl.haxx.se/mail/lib-2017-12/0000.html
[3] = https://curl.haxx.se/bug/?i=2119
[4] = https://curl.haxx.se/bug/?i=2127