Go to file
Thomas Vegas facb0e4662
tftp: Alloc maximum blksize, and use default unless OACK is received
Fixes potential buffer overflow from 'recvfrom()', should the server
return an OACK without blksize.

Bug: https://curl.haxx.se/docs/CVE-2019-5482.html
CVE-2019-5482
2019-09-09 08:14:34 +02:00
.github .github/FUNDING: mention our opencollective "home" [ci skip] 2019-05-23 11:16:23 +02:00
CMake CMake: remove needless newlines at end of gss variables 2019-08-31 11:40:10 +02:00
docs KNOWN_BUGS/TODO: cleanup and remove outdated issues 2019-09-05 14:40:18 +02:00
include defines: avoid underscore-prefixed defines 2019-08-23 11:47:57 +02:00
lib tftp: Alloc maximum blksize, and use default unless OACK is received 2019-09-09 08:14:34 +02:00
m4 configure: fix --disable-code-coverage 2019-07-09 12:56:51 +02:00
packages defines: avoid underscore-prefixed defines 2019-08-23 11:47:57 +02:00
plan9 plan9: fix installation instructions 2019-08-29 19:24:59 +02:00
projects build-openssl: fix build with Visual Studio 2019 2019-08-26 14:34:26 +02:00
scripts scripts: fix typos 2019-03-31 22:55:09 +02:00
src curl: fix include conditions 2019-08-29 19:25:09 +02:00
tests Curl_addr2string: take an addrlen argument too 2019-08-31 11:41:56 +02:00
winbuild winbuild: add vquic to list of build directories 2019-07-29 01:49:53 -04:00
.cirrus.yml cirrus: Customize the disabled tests per FreeBSD version 2019-04-01 10:16:10 +02:00
.dir-locals.el Add .dir-locals and set c-basic-offset to 2. 2015-12-23 10:16:14 +01:00
.gitattributes .gitattributes: make tabs in indentation a visible error 2018-12-06 20:21:17 +01:00
.gitignore scripts/completion.pl: also generate fish completion file 2019-03-02 11:31:18 +01:00
.lgtm.yml CI: remove duplicate configure flag for LGTM.com 2019-08-31 11:40:09 +02:00
.mailmap mailmap: added Kyohei Kadota 2019-08-02 07:56:07 +02:00
.travis-iconv-env.sh travis: add build with iconv enabled 2018-02-15 14:18:34 +01:00
.travis.yml travis: enable ngtcp2 builds again 2019-08-28 00:03:12 +02:00
CHANGES CHANGES: spell fix, use correct path to script 2017-02-07 08:22:37 +01:00
CMakeLists.txt CMake: use platform dependent name for dlopen() library 2019-08-31 11:39:47 +02:00
COPYING COPYING: it's 2019 2019-01-19 20:26:31 +01:00
GIT-INFO CHANGES.0: removed 2017-02-07 08:20:10 +01:00
MacOSX-Framework includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
Makefile.am plan9: add support for running on Plan 9 2019-07-31 00:23:25 +02:00
Makefile.dist build: remove the Borland specific makefiles 2018-06-02 11:23:40 +02:00
README docs: minor polish to the bug bounty / security docs 2019-04-29 08:09:10 +02:00
README.md docs: minor polish to the bug bounty / security docs 2019-04-29 08:09:10 +02:00
RELEASE-NOTES RELEASE-NOTES: synced 2019-09-04 11:17:14 +02:00
SECURITY.md SECURITY.md: created 2019-06-10 10:16:02 +02:00
acinclude.m4 configure: add --with-amissl 2019-03-15 10:22:42 +01:00
appveyor.yml appveyor: pass on -k to make 2019-08-01 07:43:24 +02:00
buildconf includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
buildconf.bat buildconf: fix header filename 2019-07-09 17:33:07 +02:00
configure.ac ngtcp2: Build with latest ngtcp2 and ngtcp2_crypto_openssl 2019-08-27 16:31:19 +02:00
curl-config.in curl-config.in: remove dependency on bc 2018-10-26 00:06:19 +02:00
libcurl.pc.in URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
maketgz maketgz: delete .bak files, fix indentation 2018-06-15 23:28:34 +00:00

README.md

curl logo

CII Best Practices Coverity passed Travis-CI Build Status AppVeyor Build Status Cirrus Build Status Coverage Status Backers on Open Collective Sponsors on Open Collective Language Grade: C/C++ Codacy Badge

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how!

You find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms and similar. If you distribute curl binaries or other binaries that involve libcurl, you might enjoy the LICENSE-MIXING document.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Website

Visit the curl web site for the latest news and downloads.

Git

To download the very latest source from the Git server do this:

git clone https://github.com/curl/curl.git

(you'll get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public!

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]