Julien Chaffraix
6488e03f44
http_negociate: Be consistent in gss_init_sec_context attributes.
...
This change makes this callsite match the rest of the code.
2011-07-12 07:06:25 -07:00
Daniel Stenberg
5c314c6bb4
Curl_input_negotiate: do not delegate GSSAPI credentials
...
This is a security flaw. See curl advisory 20110623 for details.
Reported by: Richard Silverman
2011-06-22 23:04:26 +02:00
Daniel Stenberg
889d1e973f
whitespace cleanup: no space first in conditionals
...
"if(a)" is our style, not "if( a )"
2011-04-27 09:09:35 +02:00
Daniel Stenberg
b903186fa0
source cleanup: unify look, style and indent levels
...
By the use of a the new lib/checksrc.pl script that checks that our
basic source style rules are followed.
2011-04-27 09:09:35 +02:00
Fabian Keil
1702a2c08d
Fix a couple of spelling errors in lib/
...
Found with codespell.
2011-04-21 07:55:53 -07:00
Daniel Stenberg
13b8fc46a3
negotiation: Wrong proxy authorization
...
There's an error in http_negotiation.c where a mistake is using only
userpwd even for proxy requests. Ludek provided a patch, but I decided
to write the fix slightly different using his patch as inspiration.
Reported by: Ludek Finstrle
Bug: http://curl.haxx.se/bug/view.cgi?id=3046066
2010-08-16 22:26:52 +02:00
Yang Tse
69d07feb14
fix spnego memory leak
2010-06-02 12:44:46 +02:00
Julien Chaffraix
9e480973eb
OOM fixes in http_negociate.c and lib/splay.c
...
Fix 2 OOM errors: a missing NULL-check in lib/http_negociate.c
and a potential NULL dereferencing in lib/splay.c
2010-05-26 00:40:26 +02:00
Daniel Stenberg
2309b4e330
remove the CVSish $Id$ lines
2010-03-24 11:02:54 +01:00
Yang Tse
33a3753c3f
libcurl's memory.h renamed to curl_memory.h
2009-04-21 11:46:16 +00:00
Yang Tse
c621546bd6
fix compiler warning: implicit conversion shortens 64-bit value into a 32-bit value
2009-04-13 07:18:39 +00:00
Daniel Stenberg
b701ea36a7
moved the Curl_raw_ functions into the new lib/rawstr.c file for easier curlx_
...
inclusion by the curl tool without colliding with the curl_strequal functions.
2008-10-23 11:49:19 +00:00
Dan Fandrich
934708d950
Made some variables const which eliminated some casts
2008-09-02 17:41:20 +00:00
Yang Tse
ac18b471d2
libcurl internal base64.h header file renamed to curl_base64.h
2008-08-17 00:25:38 +00:00
Yang Tse
3e4a8cb800
Fix Use of conditional definition of USE_OPENSSL
2008-08-16 03:27:07 +00:00
Yang Tse
c57e748107
David Rosenstrauch reported that header files spnegohelp.h and
...
openssl/objects.h were needed to compile SPNEGO support.
2008-05-26 03:10:34 +00:00
Daniel Stenberg
e0c2a39ad4
- Andre Guibert de Bruet fixed a second case of not checking the malloc()
...
return code in the Negotiate code.
2008-04-14 15:22:45 +00:00
Daniel Stenberg
84eb9fee76
- Andre Guibert de Bruet found and fixed a case where malloc() was called but
...
was not checked for a NULL return, in the Negotiate code.
2008-04-12 11:50:51 +00:00
Michal Marek
d0a4b50e19
- Fix the MIT / Heimdal check for good:
...
Define HAVE_GSSMIT if <gssapi/{gssapi.h,gssapi_generic.h,gssapi_krb5.h}> are
available, otherwise define HAVE_GSSHEIMDAL if <gssapi.h> is available.
Only define GSS_C_NT_HOSTBASED_SERVICE to gss_nt_service_name if
GSS_C_NT_HOSTBASED_SERVICE isn't declared by the gssapi headers. This should
avoid breakage in case we wrongly recognize Heimdal as MIT again.
2008-04-07 09:26:30 +00:00
Daniel Stenberg
590f0358d8
- Anatoli Tubman found and fixed a crash with Negotiate authentication used on
...
a re-used connection where both requests used Negotiate.
2008-03-01 22:32:03 +00:00
Daniel Stenberg
b6575ce0b0
While inspecting the Negotiate code, I noticed how the proxy auth was using
...
the same state struct as the host auth, so both could never be used at the
same time! I fixed it (without being able to check) to use two separate
structs to allow authentication using Negotiate on host and proxy
simultanouesly.
2007-11-20 23:17:08 +00:00
Daniel Stenberg
86956c2261
white space changes only to clean up indent and source width
2007-11-20 23:02:58 +00:00
Daniel Stenberg
ad6e28073c
removed space after if and while before the parenthesis for better source code
...
consistency
2007-11-05 09:45:09 +00:00
Daniel Stenberg
015d5869d7
Mark Davies fixed Negotiate authentication over proxy, and also introduced
...
the --proxy-negotiate command line option to allow a user to explicitly
select it.
2007-09-21 11:05:31 +00:00
Dan Fandrich
8cf0814a14
Fixed some minor type mismatches and missing consts mainly found by splint.
2007-08-27 06:31:28 +00:00
Dan Fandrich
c321b9f704
Fixes some more out of memory handling bugs.
2007-04-04 23:41:35 +00:00
Daniel Stenberg
359d500908
- David McCreedy made changes to allow base64 encoding/decoding to work on
...
non-ASCII platforms.
2007-01-03 23:04:38 +00:00
Daniel Stenberg
44d84ac164
Avoid typecasting a signed char to an int when using is*() functions, as that
...
could very well cause a negate number get passed in and thus cause reading
outside of the array usually used for this purpose.
We avoid this by using the uppercase macro versions introduced just now that
does some extra crazy typecasts to avoid byte codes > 127 to cause negative
int values.
2006-10-17 21:32:56 +00:00
Daniel Stenberg
e85e30546c
Roland Blom filed bug report #1481217
...
(http://curl.haxx.se/bug/view.cgi?id=1481217 ), with follow-ups by Michele Bini
and David Byron. libcurl previously wrongly used GetLastError() on windows to
get error details after socket-related function calls, when it really should
use WSAGetLastError() instead.
When changing to this, the former function Curl_ourerrno() is now instead
called Curl_sockerrno() as it is necessary to only use it to get errno from
socket-related functions as otherwise it won't work as intended on Windows.
2006-05-04 22:39:47 +00:00
Daniel Stenberg
10beb36b1c
Ulf Härnhammar fixed a format string (printf style) problem in the Negotiate
...
code. It should however not be the cause of any troubles. He also fixed a
few similar problems in the HTTP test server code.
2006-02-18 22:27:01 +00:00
Daniel Stenberg
ab4086bc24
Updated the copyright year since changes have been this year.
2005-03-31 07:02:02 +00:00
Dan Fandrich
9798432f56
Fixed some compiler warnings. Fixed a low incidence memory leak in the test server.
2005-02-24 18:54:23 +00:00
Daniel Stenberg
527f70e540
Curl_base64_decode() now returns an allocated buffer
2005-02-22 12:10:30 +00:00
Daniel Stenberg
9c4ffcc250
Enrico Scholz fixed the service name to be uppercase as reported in bug
...
report #1004105
2004-08-05 18:52:54 +00:00
Daniel Stenberg
feb2dd2835
Replaced all uses of sprintf() with the safer snprintf(). It is just a
...
precaution to prevent mistakes to lead to buffer overflows.
2004-06-24 11:54:11 +00:00
Daniel Stenberg
bbafb2eb27
curl_global_init_mem() allows the memory functions to be replaced.
...
memory.h is included everywhere for this.
2004-05-11 11:30:23 +00:00
Daniel Stenberg
4b9f8e766d
Made host name and proxy name get stored in a 'struct hostname' and set
...
all things up to work with encoded host names internally, as well as keeping
'display names' to show in debug messages. IDN resolves work for me now using
ipv6, ipv4 and ares resolving. Even cookies on IDN sites seem to do right.
2004-04-27 13:56:23 +00:00
Daniel Stenberg
053f6c85ef
updated year in the copyright string
2004-01-07 09:19:33 +00:00
Daniel Stenberg
471c30372b
Markus Moeller's change to check for HAVE_SPNEGO instead of the previous
2003-11-27 09:52:44 +00:00
Daniel Stenberg
09ccfcdcd4
Markus Moeller's SPNEGO patch applied, with my edits, additions and minor
...
cleanups.
2003-09-19 12:56:22 +00:00
Daniel Stenberg
fd42247cac
Tim Bartley's patch that makes the GSSNEGOTIATE option work for Microsoft's
...
"Negotiate" authentication as well.
2003-09-11 22:21:11 +00:00
Daniel Stenberg
b47462bd68
Daniel Kouril's fix to make the GSS-Negotiate work fine.
2003-07-23 11:28:59 +00:00
Daniel Stenberg
898e067ccc
kill warnings
2003-06-26 11:25:23 +00:00
Daniel Stenberg
e56ae1426c
Daniel Kouril's patch that adds HTTP negotiation support to libcurl was
...
added.
2003-06-10 12:22:19 +00:00
