1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-15 14:05:03 -05:00
curl/lib
Daniel Stenberg 365c5ba395 formpost: better random boundaries
When doing multi-part formposts, libcurl used a pseudo-random value that
was seeded with time(). This turns out to be bad for users who formpost
data that is provided with users who then can guess how the boundary
string will look like and then they can forge a different formpost part
and trick the receiver.

My advice to such implementors is (still even after this change) to not
rely on the boundary strings being cryptographically strong. Fix your
code and logic to not depend on them that much!

I moved the Curl_rand() function into the sslgen.c source file now to be
able to take advantage of the SSL library's random function if it
provides one. If not, try to use the RANDOM_FILE for seeding and as a
last resort keep the old logic, just modified to also add microseconds
which makes it harder to properly guess the exact seed.

The formboundary() function in formdata.c is now using 64 bit entropy
for the boundary and therefore the string of dashes was reduced by 4
letters and there are 16 hex digits following it. The total length is
thus still the same.

Bug: http://curl.haxx.se/bug/view.cgi?id=1251
Reported-by: "Floris"
2013-06-25 09:55:49 +02:00
..
.gitignore move msvc IDE related files to 'vc' directory tree 2013-02-13 13:28:13 +01:00
amigaos.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
amigaos.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
arpa_telnet.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
asyn-ares.c c-ares: improve error message on failed resolve 2013-06-23 20:25:38 +02:00
asyn-thread.c resolver_error: remove wrong error message output 2013-02-18 22:52:58 +01:00
asyn.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
axtls.c axtls: now done non-blocking 2013-06-12 10:37:32 +02:00
axtls.h axtls: now done non-blocking 2013-06-12 10:37:32 +02:00
base64.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
bundles.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
bundles.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
checksrc.pl checksrc: ban unsafe functions 2013-03-07 11:08:05 +01:00
CMakeLists.txt Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
config-amigaos.h curl tool: use configuration files from lib directory 2012-04-06 23:37:05 +02:00
config-dos.h config-dos.h: define HAVE_CLOSE_S for MSDOS/Watt-32 2013-02-15 02:35:22 +01:00
config-mac.h curl tool: use configuration files from lib directory 2012-04-06 23:37:05 +02:00
config-os400.h strlcat: remove function 2013-02-14 10:41:45 +01:00
config-riscos.h strlcat: remove function 2013-02-14 10:41:45 +01:00
config-symbian.h strcasestr: remove check for this unused function 2013-02-23 19:51:05 +01:00
config-tpf.h strlcat: remove function 2013-02-14 10:41:45 +01:00
config-vxworks.h strcasestr: remove check for this unused function 2013-02-23 19:51:05 +01:00
config-win32.h Enabled MinGW sync resolver builds. 2013-04-11 14:05:08 +02:00
config-win32ce.h unicode NTLM SSPI: cleanup 2012-07-05 22:18:11 +02:00
conncache.c curl_easy_init: use less mallocs 2013-04-26 22:55:55 +02:00
conncache.h curl_easy_init: use less mallocs 2013-04-26 22:55:55 +02:00
connect.c multi_socket: react on socket close immediately 2013-06-20 22:36:52 +02:00
connect.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
content_encoding.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
content_encoding.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
cookie.c cookies: follow-up fix for path checking 2013-06-12 11:19:56 +02:00
cookie.h cookies: follow-up fix for path checking 2013-06-12 11:19:56 +02:00
curl_addrinfo.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_addrinfo.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_base64.h
curl_config.h.cmake nss: unconditionally require PK11_CreateGenericObject() 2012-04-13 12:19:36 +02:00
curl_darwinssl.c darwinssl: fix crash that started happening in Lion 2013-06-22 15:13:36 -06:00
curl_darwinssl.h formpost: better random boundaries 2013-06-25 09:55:49 +02:00
curl_fnmatch.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_fnmatch.h
curl_gethostname.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_gethostname.h
curl_gssapi.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_gssapi.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_hmac.h include libcurl standard internal headers 2010-06-02 14:13:02 +02:00
curl_ldap.h lib/*.h: use our standard naming scheme for header inclusion guards 2012-12-28 18:21:40 +01:00
curl_md4.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_md5.h Fixed compile error with GNUTLS+NETTLE 2012-05-22 16:40:09 +02:00
curl_memory.h Revert "WIN32 MemoryTracking: track wcsdup() _wcsdup() and _tcsdup() usage" 2013-05-12 15:10:01 +02:00
curl_memrchr.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_memrchr.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_multibyte.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_multibyte.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_ntlm_core.c ntlm_core: fix compiler warning when building with clang 2013-02-16 14:21:09 -07:00
curl_ntlm_core.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_ntlm_msgs.c curl_ntlm_msgs.c: revert commit 463082bea4 2013-03-25 03:32:46 +01:00
curl_ntlm_msgs.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_ntlm_wb.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_ntlm_wb.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_ntlm.c NTLM: fix several NTLM code paths memory leaks 2013-03-25 03:32:47 +01:00
curl_ntlm.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_rtmp.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_rtmp.h
curl_sasl.c formpost: better random boundaries 2013-06-25 09:55:49 +02:00
curl_sasl.h sasl: Reworked SASL mechanism constants 2013-04-13 13:29:50 +01:00
curl_schannel.c curl_schannel.c: Removed variable unused since 35874298e4 2013-06-02 20:21:42 +02:00
curl_schannel.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_setup_once.h curl_setup_once.h: definition of HAVE_CLOSE_S defines sclose() to close_s() 2013-02-15 02:35:23 +01:00
curl_setup.h curl_setup.h: Fixed redefinition warning using mingw-w64 2013-06-02 15:53:08 +02:00
curl_sspi.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_sspi.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_threads.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curl_threads.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
curlx.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
cyassl.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
cyassl.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
dict.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
dict.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
dotdot.c dotdot: introducing dot file path cleanup 2013-06-22 14:15:07 +02:00
dotdot.h dotdot: introducing dot file path cleanup 2013-06-22 14:15:07 +02:00
easy.c formpost: better random boundaries 2013-06-25 09:55:49 +02:00
easyif.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
escape.c Curl_urldecode: no peeking beyond end of input buffer 2013-06-22 11:21:35 +02:00
escape.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
file.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
file.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
fileinfo.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
fileinfo.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
firefox-db2pem.sh
formdata.c formpost: better random boundaries 2013-06-25 09:55:49 +02:00
formdata.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
ftp.c ftp_state_pasv_resp: connect through proxy also when set by env 2013-04-26 16:49:25 +02:00
ftp.h pingpong: Renamed curl_ftptransfer to curl_pp_transfer 2013-02-23 17:09:24 +00:00
ftplistparser.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
ftplistparser.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
getenv.c VMS: fix and generate the VMS build config 2013-02-05 23:08:57 +01:00
getinfo.c getinfo.c: reset timecond when clearing session-info variables 2013-04-22 22:43:32 +02:00
getinfo.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
gopher.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
gopher.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
gtls.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
gtls.h formpost: better random boundaries 2013-06-25 09:55:49 +02:00
hash.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hash.h Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
hmac.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostasyn.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostcheck.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostcheck.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
hostip4.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostip6.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostip.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostip.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
hostsyn.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
http_chunks.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
http_chunks.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
http_digest.c Curl_output_digest: support auth-int for empty entity body 2013-06-11 00:08:13 +02:00
http_digest.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
http_negotiate_sspi.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
http_negotiate.c http_negotiate.c: Fixed passing argument from incompatible pointer type 2013-04-07 00:06:19 +02:00
http_negotiate.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
http_proxy.c Curl_proxyCONNECT: count received headers 2013-03-23 23:20:01 +01:00
http_proxy.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
http.c NTLM: fix several NTLM code paths memory leaks 2013-03-25 03:32:47 +01:00
http.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
idn_win32.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
if2ip.c if2ip.c: fix compiler warning 2013-04-10 16:44:54 +02:00
if2ip.h connect: treat an interface bindlocal() problem as a non-fatal error 2013-04-06 16:51:58 +02:00
imap.c email: Tidy up of *_perform_authenticate() 2013-04-28 12:57:42 +01:00
imap.h imap: Added support for ;auth=<mech> in the URL 2013-04-13 16:11:27 +01:00
inet_ntop.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
inet_ntop.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
inet_pton.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
inet_pton.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
krb4.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
krb4.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
krb5.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
ldap.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
libcurl.def
libcurl.plist MacOSX-Framework: Make script work in Xcode 4.0 and later 2013-02-17 14:30:38 -07:00
libcurl.rc
libcurl.vers.in configure: use XC_LIBTOOL for portability across libtool versions 2013-03-08 13:27:45 +01:00
llist.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
llist.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
Makefile.am curl.h: stricter CURL_EXTERN linkage decorations logic 2013-03-12 00:27:47 +01:00
makefile.amiga curl tool: use configuration files from lib directory - follow-up I 2012-04-07 00:31:24 +02:00
Makefile.b32 Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
makefile.dj
Makefile.inc formpost: better random boundaries 2013-06-25 09:55:49 +02:00
Makefile.m32 Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
Makefile.netware Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
Makefile.vc6 Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
Makefile.vxworks Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
Makefile.Watcom Updated zlib version in build files. 2013-05-11 17:08:00 +02:00
md4.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
md5.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
memdebug.c Revert "WIN32 MemoryTracking: track wcsdup() _wcsdup() and _tcsdup() usage" 2013-05-12 15:10:01 +02:00
memdebug.h Revert "WIN32 MemoryTracking: track wcsdup() _wcsdup() and _tcsdup() usage" 2013-05-12 15:10:01 +02:00
mk-ca-bundle.pl Fixed lost OpenSSL output with "-t" - followup. 2013-04-10 00:20:37 +02:00
mk-ca-bundle.vbs Updated copyright date. 2013-04-04 04:04:21 +02:00
mprintf.c printf: make sure %x are treated unsigned 2013-06-25 09:55:49 +02:00
multi.c multi_socket: react on socket close immediately 2013-06-20 22:36:52 +02:00
multihandle.h Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
multiif.h multi_socket: react on socket close immediately 2013-06-20 22:36:52 +02:00
netrc.c VMS: fix and generate the VMS build config 2013-02-05 23:08:57 +01:00
netrc.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
non-ascii.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
non-ascii.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
nonblock.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
nonblock.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
nss.c nss: give PR_INTERVAL_NO_WAIT instead of -1 to PR_Recv/PR_Send 2013-05-09 11:23:15 +02:00
nssg.h formpost: better random boundaries 2013-06-25 09:55:49 +02:00
nwlib.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
nwos.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
objnames-test08.sh test 1222: 8 chars object name generation && test 1221: adjustments 2013-01-03 19:24:00 +01:00
objnames-test10.sh test 1222: 8 chars object name generation && test 1221: adjustments 2013-01-03 19:24:00 +01:00
objnames.inc test 1222: 8 chars object name generation && test 1221: adjustments 2013-01-03 19:24:00 +01:00
openldap.c always-multi: always use non-blocking internals 2013-01-17 19:40:35 +01:00
parsedate.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
parsedate.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
pingpong.c pingpong.c: Fix enumerated type mixed with another type 2013-03-03 13:55:01 +00:00
pingpong.h pingpong: Renamed curl_ftptransfer to curl_pp_transfer 2013-02-23 17:09:24 +00:00
pipeline.c pipelining: Remove dead code. 2013-03-14 13:30:59 +01:00
pipeline.h pipelining: Remove dead code. 2013-03-14 13:30:59 +01:00
polarssl_threadlock.c polarssl threadlock cleanup 2013-02-19 13:11:55 +01:00
polarssl_threadlock.h polarssl threadlock cleanup 2013-02-19 13:11:55 +01:00
polarssl.c polarssl.c: fix header filename typo 2013-03-08 14:02:01 +01:00
polarssl.h PolarSSL: pthread support for entropy 2013-02-15 23:30:20 +01:00
pop3.c email: Tidy up of *_perform_authenticate() 2013-04-28 12:57:42 +01:00
pop3.h pop3: Reworked authentication type constants 2013-04-13 16:20:48 +01:00
progress.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
progress.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
qssl.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
qssl.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
rawstr.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
rawstr.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
README.ares
README.curl_off_t
README.curlx Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
README.encoding
README.hostip build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
README.httpauth
README.memoryleak
README.multi_socket
README.pingpong
README.pipelining Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
rtsp.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
rtsp.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
security.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
select.c curl_global_init: accept the CURL_GLOBAL_ACK_EINTR flag 2013-03-12 10:58:20 +01:00
select.h curl_global_init: accept the CURL_GLOBAL_ACK_EINTR flag 2013-03-12 10:58:20 +01:00
sendf.c Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
sendf.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
setup-os400.h
setup-vms.h setup-vms.h: post VMS patch cleanup - III 2013-02-06 04:53:34 +01:00
share.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
share.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
slist.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
slist.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
smtp.c smtp: Fix trailing whitespace warning 2013-05-04 18:37:50 +01:00
smtp.h smtp: Fixed sending of double CRLF caused by first in EOB 2013-05-04 10:00:33 +01:00
sockaddr.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
socks_gssapi.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
socks_sspi.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
socks.c strlcat: remove function 2013-02-14 10:41:45 +01:00
socks.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
speedcheck.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
speedcheck.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
splay.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
splay.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
ssh.c rename "easy" statemachines: call them block instead 2013-02-15 11:10:18 +01:00
ssh.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
sslgen.c formpost: better random boundaries 2013-06-25 09:55:49 +02:00
sslgen.h formpost: better random boundaries 2013-06-25 09:55:49 +02:00
ssluse.c ossl_recv: check for an OpenSSL error, don't assume 2013-06-23 12:05:21 +02:00
ssluse.h formpost: better random boundaries 2013-06-25 09:55:49 +02:00
strdup.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
strdup.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
strequal.c strlcat: remove function 2013-02-14 10:41:45 +01:00
strequal.h strlcat: remove function 2013-02-14 10:41:45 +01:00
strerror.c Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
strerror.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
strtok.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
strtok.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
strtoofft.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
strtoofft.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
telnet.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
telnet.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
tftp.c always-multi: always use non-blocking internals 2013-01-17 19:40:35 +01:00
tftp.h Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
timeval.c Revert changes relative to lib/*.[ch] recent renaming 2013-01-06 18:20:27 +01:00
timeval.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
transfer.c Multiple pipelines and limiting the number of connections. 2013-03-13 23:55:24 +01:00
transfer.h Curl_perfom: removed 2013-02-01 08:14:46 +01:00
url.c dotdot: introducing dot file path cleanup 2013-06-22 14:15:07 +02:00
url.h build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
urldata.h axtls: now done non-blocking 2013-06-12 10:37:32 +02:00
version.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
warnless.c sockfilt.c: fix some W64 compiler warnings 2013-01-09 22:23:49 +01:00
warnless.h sockfilt.c: fix some W64 compiler warnings 2013-01-09 22:23:49 +01:00
wildcard.c build: fix circular header inclusion with other packages 2013-01-09 00:49:50 +01:00
wildcard.h Curl_perfom: removed 2013-02-01 08:14:46 +01:00

HTTP Pipelining with libcurl
============================

Background

Since pipelining implies that one or more requests are sent to a server before
the previous response(s) have been received, we only support it for multi
interface use.

Considerations

When using the multi interface, you create one easy handle for each transfer.
Bascially any number of handles can be created, added and used with the multi
interface - simultaneously. It is an interface designed to allow many
simultaneous transfers while still using a single thread. Pipelining does not
change any of these details.

API

We've added a new option to curl_multi_setopt() called CURLMOPT_PIPELINING
that enables "attempted pipelining" and then all easy handles used on that
handle will attempt to use an existing pipeline.

Details

- A pipeline is only created if a previous connection exists to the same IP
  address that the new request is being made to use.

- Pipelines are only supported for HTTP(S) as no other currently supported
  protocol has features resemembling this, but we still name this feature
  plain 'pipelining' to possibly one day support it for other protocols as
  well.

- HTTP Pipelining is for GET and HEAD requests only.

- When a pipeline is in use, we must take precautions so that when used easy
  handles (i.e those who still wait for a response) are removed from the multi
  handle, we must deal with the outstanding response nicely.

- Explicitly asking for pipelining handle X and handle Y won't be supported.
  It isn't easy for an app to do this association. The lib should probably
  still resolve the second one properly to make sure that they actually _can_
  be considered for pipelining. Also, asking for explicit pipelining on handle
  X may be tricky when handle X get a closed connection.