1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-21 23:58:49 -05:00
Go to file
Daniel Stenberg 358b2b131a tftp: reject file name lengths that don't fit
... and thereby avoid telling send() to send off more bytes than the
size of the buffer!

CVE-2017-1000100

Bug: https://curl.haxx.se/docs/adv_20170809B.html
Reported-by: Even Rouault

Credit to OSS-Fuzz for the discovery
2017-08-07 09:24:30 +02:00
.github ISSUE_TEMPLATE: Add a comment not to file security issues on github 2017-07-11 11:48:37 -04:00
CMake cmake: fix send/recv argument scanner for windows 2017-07-05 09:49:30 +02:00
docs CURLOPT_NETRC.3: fix typo in 7e48aa3861 2017-08-02 15:29:27 +02:00
include system.h: include winsock2.h before windows.h 2017-07-12 07:55:18 +02:00
lib tftp: reject file name lengths that don't fit 2017-08-07 09:24:30 +02:00
m4 curl-compilers.m4: disable warning spam with Cygwin's clang 2017-07-10 10:16:29 +02:00
packages includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
projects build-wolfssl: Sync config with wolfSSL 3.11 2017-05-31 01:40:39 -04:00
scripts updatemanpages.pl: error out on too old git version 2017-06-03 00:45:31 +02:00
src getparameter: avoid returning uninitialized 'usedarg' 2017-08-05 11:52:27 +02:00
tests test1010: verify that #1718 is fixed 2017-08-04 10:01:23 +02:00
winbuild BUILD.WINDOWS: mention buildconf.bat for builds off git 2017-08-03 13:50:44 +02:00
.dir-locals.el Add .dir-locals and set c-basic-offset to 2. 2015-12-23 10:16:14 +01:00
.gitattributes .gitattributes: force shell scripts to LF 2017-04-17 08:32:13 +02:00
.gitignore test: add impacket for SMB testing 2017-07-04 10:36:06 +02:00
.travis.yml travis: explicitly specify dist 2017-08-04 09:59:42 +02:00
acinclude.m4 build: remove WIN32_LEAN_AND_MEAN from individual build systems 2017-07-11 18:16:23 +02:00
appveyor.yml AppVeyor: now really use CURL_WERROR 2017-07-29 18:47:18 +02:00
buildconf includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
buildconf.bat includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
CHANGES CHANGES: spell fix, use correct path to script 2017-02-07 08:22:37 +01:00
cmake_uninstall.cmake.in cmake: support make uninstall 2017-07-30 01:56:14 +02:00
CMakeLists.txt CMake: fix CURL_WERROR for MSVC 2017-08-04 12:01:24 +02:00
configure.ac configure: fix the check for IdnToUnicode 2017-08-01 01:04:45 +02:00
COPYING COPYING: update the generic copyright year range 2017-01-07 20:25:43 +01:00
curl-config.in URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
GIT-INFO CHANGES.0: removed 2017-02-07 08:20:10 +01:00
libcurl.pc.in URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
MacOSX-Framework includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
Makefile.am make: build the docs subdir only from within src 2017-06-30 17:09:01 +02:00
Makefile.dist VC: remove the makefile.vc6 build infra 2017-01-23 14:27:32 +01:00
maketgz maketgz: switch to -6e for xz 2017-06-24 00:04:58 +02:00
README URLs: follow GitHub project rename (also Travis CI) 2016-02-04 23:01:38 +01:00
README.md README.md: show the coverall coverage on github 2017-06-06 14:40:57 +02:00
RELEASE-NOTES RELEASE-NOTES: synced with 561e9217c 2017-08-04 10:32:38 +02:00

curl logo CII Best Practices Coverity passed Build Status Coverage Status

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how!

You find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms and similar. If you distribute curl binaries or other binaries that involve libcurl, you might enjoy the LICENSE-MIXING document.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Website

Visit the curl web site for the latest news and downloads.

Git

To download the very latest source off the Git server do this:

git clone https://github.com/curl/curl.git

(you'll get a directory named curl created, filled with the source code)

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.