Daniel Stenberg
4732ca5724
CURLOPT_TCP_NODELAY: now enabled by default
...
After a few wasted hours hunting down the reason for slowness during a
TLS handshake that turned out to be because of TCP_NODELAY not being
set, I think we have enough motivation to toggle the default for this
option. We now enable TCP_NODELAY by default and allow applications to
switch it off.
This also makes --tcp-nodelay unnecessary, but --no-tcp-nodelay can be
used to disable it.
Thanks-to: Tim Rühsen
Bug: https://curl.haxx.se/mail/lib-2016-06/0143.html
2016-08-05 00:12:57 +02:00
Serj Kalichev
edeabf741f
TFTP: Fix upload problem with piped input
...
When input stream for curl is stdin and input stream is not a file but
generated by a script then curl can truncate data transfer to arbitrary
size since a partial packet is treated as end of transfer by TFTP.
Fixes #857
2016-08-04 00:30:31 +02:00
Daniel Stenberg
600bb4e852
mk-ca-bundle.pl: -m keeps ca cert meta data in output
...
Makes the script pass on comments holding meta data to the output
file. Like fingerprinters, issuer, date ranges etc.
Closes #937
2016-08-04 00:28:28 +02:00
Daniel Stenberg
bde2f09d5e
multi: make Curl_expire() work with 0 ms timeouts
...
Previously, passing a timeout of zero to Curl_expire() was a magic code
for clearing all timeouts for the handle. That is now instead made with
the new Curl_expire_clear() function and thus a 0 timeout is fine to set
and will trigger a timeout ASAP.
This will help removing short delays, in particular notable when doing
HTTP/2.
2016-08-04 00:26:01 +02:00
Daniel Stenberg
6eb60c2dc5
transfer: return without select when the read loop reached maxcount
...
Regression added in 790d6de485
. The was then added to avoid one
particular transfer to starve out others. But when aborting due to
reading the maxcount, the connection must be marked to be read from
again without first doing a select as for some protocols (like SFTP/SCP)
the data may already have been read off the socket.
Reported-by: Dan Donahue
Bug: https://curl.haxx.se/mail/lib-2016-07/0057.html
2016-08-04 00:23:27 +02:00
Bill Nagel
497e7c9d34
mbedtls: Added support for NTLM
2016-08-03 19:33:59 +01:00
Sergei Nikulov
db3887632c
travis: removed option to rebuild autotool from source
...
Fixes #943
2016-08-03 13:25:32 +02:00
Daniel Stenberg
73878278d8
bump: start working toward 7.50.2
2016-08-03 09:36:27 +02:00
Daniel Stenberg
f2cb3a0119
THANKS: 7 new contributors from the 7.50.1 release
2016-08-03 08:37:16 +02:00
Daniel Stenberg
95addfe828
RELEASE-NOTES: 7.50.1
2016-08-03 00:34:27 +02:00
Daniel Stenberg
11ec5ad435
TLS: only reuse connections with the same client cert
...
CVE-2016-5420
Bug: https://curl.haxx.se/docs/adv_20160803B.html
2016-08-03 00:34:27 +02:00
Daniel Stenberg
247d890da8
TLS: switch off SSL session id when client cert is used
...
CVE-2016-5419
Bug: https://curl.haxx.se/docs/adv_20160803A.html
Reported-by: Bru Rom
Contributions-by: Eric Rescorla and Ray Satiro
2016-08-03 00:34:27 +02:00
Daniel Stenberg
75dc096e01
curl_multi_cleanup: clear connection pointer for easy handles
...
CVE-2016-5421
Bug: https://curl.haxx.se/docs/adv_20160803C.html
Reported-by: Marcelo Echeverria and Fernando Muñoz
2016-08-03 00:34:27 +02:00
Daniel Stenberg
9cb1059f92
KNOWN_BUGS: SOCKS proxy not working via IPv6
...
Closes #835
2016-08-03 00:24:08 +02:00
Daniel Stenberg
ac09c422d3
KNOWN_BUGS: CURLOPT_SEEKFUNCTION not called with CURLFORM_STREAM
...
Closes #768
2016-08-03 00:21:42 +02:00
Daniel Stenberg
80ab2b5ad9
KNOWN_BUGS: transfer-encoding: chunked in HTTP/2
...
Closes #662
2016-08-03 00:19:53 +02:00
Daniel Stenberg
52276b51e0
TODO: Provide cmake config-file
...
Closes #885
2016-08-03 00:15:58 +02:00
Patrick Monnerat
a0c2ab9370
os400: define BUILDING_LIBCURL in make script.
2016-08-02 14:21:31 +02:00
Daniel Stenberg
2136a6a892
RELEASE-NOTES: synced with aa9f536a18
2016-08-01 23:40:27 +02:00
Thomas Glanzmann
aa9f536a18
mbedtls: Fix debug function name
...
This patch is necessary so that curl compiles if MBEDTLS_DEBUG is
defined.
Bug: https://curl.haxx.se/mail/lib-2016-08/0001.html
2016-08-01 13:16:42 -04:00
Sergei Nikulov
120fe1a22d
travis: fix OSX build by re-installing libtool
...
Apparently due to a broken homebrew install
fixes #934
Closes #939
2016-08-01 15:08:53 +02:00
Martin Vejnár
608b11a91f
win32: fix a potential memory leak in Curl_load_library
...
If a call to GetSystemDirectory fails, the `path` pointer that was
previously allocated would be leaked. This makes sure that `path` is
always freed.
Closes #938
2016-08-01 10:43:10 +02:00
Daniel Stenberg
d6604524ad
include: revert 9adf3c4
and make public types void * again
...
Many applications assume the actual contents of the public types and use
that do for example forward declarations (saving them from including our
public header) which then breaks when we switch from void * to a struct
*.
I'm not convinced we were wrong, but since this practise seems
widespread enough I'm willing to (partly) step down.
Now libcurl uses the struct itself when it is built and it allows
applications to use the struct type if CURL_STRICTER is defined at the
time of the #include.
Reported-by: Peter Frühberger
Fixes #926
2016-07-31 22:59:22 +02:00
Yonggang Luo
2bbed9c4f0
cmake: Fix for schannel support
...
The check_library_exists_concat do not check crypt32 library properly.
So include it directly.
Bug: https://github.com/curl/curl/pull/917
Reported-by: Yonggang Luo
Bug: https://github.com/curl/curl/issues/935
Reported-by: Alain Danteny
2016-07-28 03:36:13 -04:00
Jay Satiro
cb9ba5cf8d
Revert "travis: Install libtool for OS X builds"
...
Didn't work.
This reverts commit 50723585ed
.
2016-07-28 00:52:44 -04:00
Jay Satiro
50723585ed
travis: Install libtool for OS X builds
...
CI is failing due to missing libtoolize, so I'm trying this.
2016-07-28 00:36:55 -04:00
Viktor Szakats
17bf323221
TODO: minor typo in last commit
...
merged #931
2016-07-26 16:40:12 +02:00
Daniel Stenberg
f3cad5bbf2
TODO: Timeout idle connections from the pool
2016-07-26 16:03:15 +02:00
Patrick Monnerat
ea88694184
os400: minimum supported OS version: V6R1M0.
...
Do not log compilation informational messages.
2016-07-25 18:58:23 +02:00
Jay Satiro
6b130d6be6
tests: Fix for http/2 feature
...
Bug: https://curl.haxx.se/mail/lib-2016-07/0070.html
Reported-by: Paul Howarth
2016-07-24 02:49:47 -04:00
Steve Holme
1979008703
README: Mention wolfSSL in the 'Dependencies' section
2016-07-23 21:34:46 +01:00
Steve Holme
3fc845914a
vauth.h: No need to query HAVE_GSSAPI || USE_WINDOWS_SSPI for SPNEGO
...
As SPNEGO is only defined when these pre-processor variables are defined
there is no need to query them explicitly.
2016-07-23 21:29:16 +01:00
Steve Holme
25bf71ab07
spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration
...
Typo introduced in commit ad5e9bfd5d
.
2016-07-23 21:29:16 +01:00
Daniel Stenberg
c7468e8ea2
SECURITY: mention how to get windows-specific CVEs
...
... and make the distros link a proper link
2016-07-22 01:47:13 +02:00
Dan Fandrich
47fa8f0dae
test558: fix test by stripping file paths from FD lines
2016-07-21 17:06:04 +02:00
Kamil Dudka
5e26d9ceea
tests: distribute the http2-server.pl script, too
2016-07-21 13:07:27 +02:00
Kamil Dudka
8b9ba132f0
docs: distribute the CURLINFO_HTTP_VERSION(3) man page, too
2016-07-21 13:06:17 +02:00
Daniel Stenberg
001f8d06fe
bump: start working on 7.50.1
2016-07-21 11:16:08 +02:00
Daniel Stenberg
79e63a53bb
RELEASE-NOTES: version 7.50.0 ready
2016-07-21 10:53:38 +02:00
Daniel Stenberg
d78cf1f03a
THANKS: 13 new contributors from the 7.50.0 release
2016-07-21 10:53:38 +02:00
Jay Satiro
af8eb69cb2
winbuild: fix embedded manifest option
...
Embedded manifest option didn't work due to typo.
Reported-by: Stefan Kanthak
2016-07-21 01:37:29 -04:00
Jay Satiro
c5cffce56e
vauth: Fix memleak by freeing credentials if out of memory
...
This is a follow up to the parent commit dcdd4be
which fixes one leak
but creates another by failing to free the credentials handle if out of
memory. Also there's a second location a few lines down where we fail to
do same. This commit fixes both of those issues.
2016-07-20 22:00:45 -04:00
Saurav Babu
dcdd4be352
vauth: Fixed memory leak due to function returning without free
...
This patch allocates memory to "output_token" only when it is required
so that memory is not leaked if function returns.
2016-07-20 23:21:49 +02:00
Daniel Stenberg
c6d3fa11e6
test558: updated after ipv6-check move
...
Follow-up commit to c50980807c
to make this test pass.
2016-07-20 23:06:03 +02:00
Jay Satiro
4ee203542d
connect: disable TFO on Linux when using SSL
...
- Linux TFO + TLS is not implemented yet.
Bug: https://github.com/curl/curl/issues/907
2016-07-20 02:49:19 -04:00
Daniel Stenberg
57ac61a469
ROADMAP: QUIC and TLS 1.3
2016-07-19 23:10:39 +02:00
Daniel Stenberg
545562f13e
RELEASE-NOTES: synced with c50980807c
2016-07-19 23:04:26 +02:00
Brian Prodoehl
c50980807c
curl_global_init: Check if IPv6 works
...
- Curl_ipv6works() is not thread-safe until after the first call, so
call it once during global init to avoid a possible race condition.
Bug: https://github.com/curl/curl/issues/915
PR: https://github.com/curl/curl/pull/918
2016-07-18 02:42:28 -04:00
Timothy Polich
16fe3f6b0a
CURLMOPT_SOCKETFUNCTION.3: fix typo
...
Closes https://github.com/curl/curl/pull/914
2016-07-14 02:58:59 -04:00
Miroslav Franc
bf430ecdef
library: Fix memory leaks found during static analysis
...
Closes https://github.com/curl/curl/pull/913
2016-07-14 02:52:56 -04:00