Daniel Stenberg 81d135d671 Curl_close: clear data->multi_easy on free to avoid use-after-free ... Regression from b46cfbc068 (7.59.0) CVE-2018-16840 Reported-by: Brian Carpenter (Geeknik Labs) Bug: https://curl.haxx.se/docs/CVE-2018-16840.html		2018-10-29 08:05:23 +01:00
..
vauth	memory: ensure to check allocation results	2018-10-03 23:45:38 +02:00
vtls	openssl: output the correct cipher list on TLS 1.3 error	2018-10-27 10:46:38 +02:00
.gitattributes
.gitignore
amigaos.c
amigaos.h	whitespace fixes	2018-09-23 22:24:02 +00:00
arpa_telnet.h	travis: add build for "configure --disable-verbose"	2018-10-18 14:51:49 +02:00
asyn-ares.c
asyn-thread.c
asyn.h
base64.c
checksrc.pl	checksrc: handle zero scoped ignore commands	2018-10-05 13:33:21 +02:00
CMakeLists.txt	CMake: Improve config installation	2018-10-01 16:16:29 -04:00
config-amigaos.h
config-dos.h	whitespace fixes	2018-09-23 22:24:02 +00:00
config-mac.h
config-os400.h
config-riscos.h
config-symbian.h
config-tpf.h
config-vxworks.h	config: Remove unused SIZEOF_VOIDP	2018-10-24 11:20:57 +02:00
config-win32.h	config_win32: enable LDAPS	2018-10-19 09:23:14 +02:00
config-win32ce.h
conncache.c
conncache.h
connect.c
connect.h
content_encoding.c
content_encoding.h
cookie.c
cookie.h
curl_addrinfo.c
curl_addrinfo.h
curl_base64.h
curl_config.h.cmake	config: Remove unused SIZEOF_VOIDP	2018-10-24 11:20:57 +02:00
curl_ctype.c
curl_ctype.h
curl_des.c
curl_des.h
curl_endian.c
curl_endian.h
curl_fnmatch.c
curl_fnmatch.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h
curl_hmac.h
curl_ldap.h	whitespace fixes	2018-09-23 22:24:02 +00:00
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c
curl_multibyte.h
curl_ntlm_core.c
curl_ntlm_core.h
curl_ntlm_wb.c	curl_ntlm_wb: check aprintf() return codes	2018-10-08 12:06:33 +02:00
curl_ntlm_wb.h
curl_path.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
curl_path.h	headers: end all headers with guard comment	2018-10-23 10:02:24 +02:00
curl_printf.h
curl_range.c
curl_range.h
curl_rtmp.c	rtmp: fix for compiling with lwIP	2018-10-26 00:04:02 +02:00
curl_rtmp.h
curl_sasl.c
curl_sasl.h
curl_sec.h
curl_setup_once.h	whitespace fixes	2018-09-23 22:24:02 +00:00
curl_setup.h	curl_setup: define NOGDI on Windows	2018-10-09 08:33:53 +02:00
curl_sha256.h
curl_sspi.c	comment: Fix multiple typos in function parameters	2018-10-03 10:27:27 +02:00
curl_sspi.h
curl_threads.c	curl_threads: fix classic MinGW compile break	2018-09-27 09:13:20 +02:00
curl_threads.h	Windows: fixes for MinGW targeting Windows Vista	2018-10-09 08:33:45 +02:00
curlx.h	whitespace fixes	2018-09-23 22:24:02 +00:00
dict.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
dict.h
doh.c	travis: add build for "configure --disable-verbose"	2018-10-18 14:51:49 +02:00
doh.h	headers: end all headers with guard comment	2018-10-23 10:02:24 +02:00
dotdot.c	Curl_dedotdotify(): always nul terminate returned string.	2018-09-24 07:48:41 +02:00
dotdot.h	headers: end all headers with guard comment	2018-10-23 10:02:24 +02:00
easy.c	whitespace fixes	2018-09-23 22:24:02 +00:00
easyif.h	whitespace fixes	2018-09-23 22:24:02 +00:00
escape.c
escape.h	whitespace fixes	2018-09-23 22:24:02 +00:00
file.c	FILE: fix CURLOPT_NOBODY and CURLOPT_HEADER output	2018-10-08 08:35:40 +02:00
file.h	whitespace fixes	2018-09-23 22:24:02 +00:00
fileinfo.c
fileinfo.h
firefox-db2pem.sh	whitespace fixes	2018-09-23 22:24:02 +00:00
formdata.c
formdata.h
ftp.c	memory: ensure to check allocation results	2018-10-03 23:45:38 +02:00
ftp.h	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
ftplistparser.c
ftplistparser.h
getenv.c
getinfo.c	FILE: fix CURLOPT_NOBODY and CURLOPT_HEADER output	2018-10-08 08:35:40 +02:00
getinfo.h
gopher.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
gopher.h
hash.c
hash.h
hmac.c
hostasyn.c
hostcheck.c
hostcheck.h	whitespace fixes	2018-09-23 22:24:02 +00:00
hostip4.c
hostip6.c
hostip.c	hostip: fix check on Curl_shuffle_addr return value	2018-10-08 08:39:24 +02:00
hostip.h
hostsyn.c
http2.c	travis: add build for "configure --disable-verbose"	2018-10-18 14:51:49 +02:00
http2.h	whitespace fixes	2018-09-23 22:24:02 +00:00
http_chunks.c
http_chunks.h	whitespace fixes	2018-09-23 22:24:02 +00:00
http_digest.c
http_digest.h
http_negotiate.c
http_negotiate.h
http_ntlm.c
http_ntlm.h
http_proxy.c
http_proxy.h
http.c	spelling fixes [ci skip]	2018-10-08 19:37:40 +00:00
http.h	whitespace fixes	2018-09-23 22:24:02 +00:00
idn_win32.c
if2ip.c
if2ip.h
imap.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
imap.h
inet_ntop.c
inet_ntop.h	whitespace fixes	2018-09-23 22:24:02 +00:00
inet_pton.c
inet_pton.h	whitespace fixes	2018-09-23 22:24:02 +00:00
krb5.c
ldap.c	ldap: show precise LDAP call in error message on Windows	2018-10-09 15:05:35 +00:00
libcurl.plist
libcurl.rc
libcurl.vers.in
llist.c
llist.h	whitespace fixes	2018-09-23 22:24:02 +00:00
Makefile.am	Makefile: add 'tidy' target that runs clang-tidy	2018-10-27 15:59:38 +02:00
makefile.amiga	whitespace fixes	2018-09-23 22:24:02 +00:00
makefile.dj	whitespace fixes	2018-09-23 22:24:02 +00:00
Makefile.inc
Makefile.m32	whitespace fixes	2018-09-23 22:24:02 +00:00
Makefile.netware	whitespace fixes	2018-09-23 22:24:02 +00:00
Makefile.vxworks
Makefile.Watcom	whitespace fixes	2018-09-23 22:24:02 +00:00
md4.c
md5.c
memdebug.c
memdebug.h
mime.c
mime.h
mk-ca-bundle.pl
mk-ca-bundle.vbs
mprintf.c
multi.c	multi: Fix error handling in the SENDPROTOCONNECT state	2018-10-27 13:03:50 +02:00
multihandle.h
multiif.h
netrc.c	netrc: free temporary strings if memory allocation fails	2018-10-25 12:54:55 +02:00
netrc.h
non-ascii.c
non-ascii.h
nonblock.c	nonblock: fix unused parameter warning	2018-10-14 21:07:45 +02:00
nonblock.h	whitespace fixes	2018-09-23 22:24:02 +00:00
nwlib.c	memory: ensure to check allocation results	2018-10-03 23:45:38 +02:00
nwos.c
objnames-test08.sh
objnames-test10.sh
objnames.inc
openldap.c
parsedate.c
parsedate.h	whitespace fixes	2018-09-23 22:24:02 +00:00
pingpong.c
pingpong.h
pipeline.c
pipeline.h
pop3.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
pop3.h
progress.c
progress.h	whitespace fixes	2018-09-23 22:24:02 +00:00
psl.c
psl.h
rand.c	rand: add comment to skip a clang-tidy false positive	2018-10-27 15:59:44 +02:00
rand.h
rtsp.c
rtsp.h	whitespace fixes	2018-09-23 22:24:02 +00:00
security.c	memory: add missing curl_printf header	2018-09-17 09:28:10 +02:00
select.c
select.h	whitespace fixes	2018-09-23 22:24:02 +00:00
sendf.c
sendf.h	travis: add build for "configure --disable-verbose"	2018-10-18 14:51:49 +02:00
setopt.c
setopt.h
setup-os400.h
setup-vms.h
sha256.c
share.c
share.h
sigpipe.h
slist.c	whitespace fixes	2018-09-23 22:24:02 +00:00
slist.h	whitespace fixes	2018-09-23 22:24:02 +00:00
smb.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
smb.h
smtp.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
smtp.h
sockaddr.h	whitespace fixes	2018-09-23 22:24:02 +00:00
socks_gssapi.c
socks_sspi.c
socks.c	whitespace fixes	2018-09-23 22:24:02 +00:00
socks.h	whitespace fixes	2018-09-23 22:24:02 +00:00
speedcheck.c
speedcheck.h
splay.c	whitespace fixes	2018-09-23 22:24:02 +00:00
splay.h
ssh-libssh.c
ssh.c	ssh: free the session on init failures	2018-10-26 15:39:15 +02:00
ssh.h
strcase.c
strcase.h
strdup.c	Curl_saferealloc: Fixed typo in docblock	2018-09-21 14:24:55 +02:00
strdup.h
strerror.c
strerror.h
strtok.c
strtok.h
strtoofft.c
strtoofft.h
system_win32.c
system_win32.h
telnet.c
telnet.h	whitespace fixes	2018-09-23 22:24:02 +00:00
tftp.c	url: use the URL API internally as well	2018-09-22 11:58:10 +02:00
tftp.h	whitespace fixes	2018-09-23 22:24:02 +00:00
timeval.c	Windows: fixes for MinGW targeting Windows Vista	2018-10-09 08:33:45 +02:00
timeval.h
transfer.c	Fix for compiling with lwIP (3)	2018-10-23 12:55:07 +02:00
transfer.h	whitespace fixes	2018-09-23 22:24:02 +00:00
url.c	Curl_close: clear data->multi_easy on free to avoid use-after-free	2018-10-29 08:05:23 +01:00
url.h	Curl_follow: return better errors on URL problems	2018-10-23 11:43:41 +02:00
urlapi-int.h	headers: end all headers with guard comment	2018-10-23 10:02:24 +02:00
urlapi.c	urlapi: starting with a drive letter on win32 is not an abs url	2018-10-02 11:48:01 +02:00
urldata.h	urldata: Fix comment in header	2018-10-25 13:04:03 +02:00
version.c
warnless.c
warnless.h
wildcard.c
wildcard.h
x509asn1.c	x509asn1: always check return code from getASN1Element()	2018-10-27 15:59:43 +02:00
x509asn1.h