]> git.ipfire.org Git - thirdparty/curl.git/log
thirdparty/curl.git
3 years agomsh3: add support for QUIC and HTTP/3 using msh3
Nick Banks [Sun, 10 Apr 2022 16:21:37 +0000 (18:21 +0200)] 
msh3: add support for QUIC and HTTP/3 using msh3

Considered experimental, as the other HTTP/3 backends.

Closes #8517

3 years agoTODO: "SFTP with SCP://"
Daniel Stenberg [Sun, 10 Apr 2022 08:35:39 +0000 (10:35 +0200)] 
TODO: "SFTP with SCP://"

3 years agoGHA: move bearssl jobs over from zuul
Daniel Stenberg [Thu, 7 Apr 2022 06:36:38 +0000 (08:36 +0200)] 
GHA: move bearssl jobs over from zuul

Closes #8684

3 years agodata/DISABLED: disable test 313 on bearssl builds
Daniel Stenberg [Thu, 7 Apr 2022 06:36:35 +0000 (08:36 +0200)] 
data/DISABLED: disable test 313 on bearssl builds

Closes #8684

3 years agoruntests: add 'bearssl' as testable feature
Daniel Stenberg [Thu, 7 Apr 2022 06:36:27 +0000 (08:36 +0200)] 
runtests: add 'bearssl' as testable feature

Closes #8684

3 years agoGHA: add openssl3 jobs moved over from zuul
Daniel Stenberg [Thu, 7 Apr 2022 06:35:08 +0000 (08:35 +0200)] 
GHA: add openssl3 jobs moved over from zuul

Closes #8683

3 years agoschannel: remove dead code that will never run
Daniel Stenberg [Wed, 6 Apr 2022 06:33:19 +0000 (08:33 +0200)] 
schannel: remove dead code that will never run

As the condition can't ever evaluate true

Reported-by: Andrey Alifanov
Ref: #8675
Closes #8677

3 years agoconnecache: remove duplicate connc->closure_handle check
Daniel Stenberg [Wed, 6 Apr 2022 06:32:03 +0000 (08:32 +0200)] 
connecache: remove duplicate connc->closure_handle check

The superfluous extra check could cause analyzer false positives
and doesn't serve any purpose.

Closes #8676

3 years agombedtls: remove server_fd from backend
MAntoniak [Tue, 5 Apr 2022 16:03:08 +0000 (18:03 +0200)] 
mbedtls: remove server_fd from backend

Closes #8682

3 years agongtcp2: use token when detecting :status header field
Tatsuhiro Tsujikawa [Tue, 5 Apr 2022 14:48:44 +0000 (16:48 +0200)] 
ngtcp2: use token when detecting :status header field

Closes #8679

3 years agongtcp2: make curl 1ms faster
Tatsuhiro Tsujikawa [Tue, 5 Apr 2022 14:47:18 +0000 (16:47 +0200)] 
ngtcp2: make curl 1ms faster

Pass 0 for an already expired timer.

Closes #8678

3 years agongtcp2: fix QUIC_IDLE_TIMEOUT
Tatsuhiro Tsujikawa [Tue, 5 Apr 2022 14:47:07 +0000 (16:47 +0200)] 
ngtcp2: fix QUIC_IDLE_TIMEOUT

QUIC_IDLE_TIMEOUT should be of type ngtcp2_duration which is
nanoseconds resolution.

Closes #8678

3 years agoEnglish: use American spelling consistently
Daniel Stenberg [Tue, 5 Apr 2022 11:32:26 +0000 (13:32 +0200)] 
English: use American spelling consistently

Authorization, Initialization, Organization etc.

Closes #8673

3 years agoBUGS: Fix incorrect punctuation
Sascha Zengler [Mon, 4 Apr 2022 19:35:47 +0000 (21:35 +0200)] 
BUGS: Fix incorrect punctuation

Closes #8672
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
3 years agotool_listhelp.c: uppercase URL
Daniel Stenberg [Mon, 4 Apr 2022 12:43:33 +0000 (14:43 +0200)] 
tool_listhelp.c: uppercase URL

3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Mon, 4 Apr 2022 09:11:39 +0000 (11:11 +0200)] 
RELEASE-NOTES: synced

3 years agohttp: streamclose "already downloaded"
Daniel Stenberg [Fri, 1 Apr 2022 21:30:42 +0000 (23:30 +0200)] 
http: streamclose "already downloaded"

Instead of connclose()ing, since when HTTP/2 is used it doesn't need to
close the connection as stopping the current transfer is enough.

Reported-by: Evangelos Foutras
Closes #8665

3 years agoftp: fix error message for partial file upload
Jay Satiro [Tue, 29 Mar 2022 19:05:47 +0000 (15:05 -0400)] 
ftp: fix error message for partial file upload

- Show the count of bytes written on partial file upload.

Prior to this change the error message mistakenly showed the count of
bytes read, not written.

Bug: https://github.com/curl/curl/discussions/8637
Reported-by: Taras Kushnir
Closes https://github.com/curl/curl/pull/8649

3 years agohttp: correct the header error message to say colon
Daniel Stenberg [Fri, 1 Apr 2022 14:03:40 +0000 (16:03 +0200)] 
http: correct the header error message to say colon

Not semicolon

Reported-by: Gisle Vanem
Ref: #8666
Closes #8667

3 years agolib: #ifdef on USE_HTTP2 better
Daniel Stenberg [Fri, 1 Apr 2022 11:45:38 +0000 (13:45 +0200)] 
lib: #ifdef on USE_HTTP2 better

... as nghttp2 might not be the library that provides HTTP/2 support.

Closes #8661

3 years agombedtls: remove 'protocols' array from backend when ALPN is not used
MAntoniak [Fri, 1 Apr 2022 11:43:10 +0000 (13:43 +0200)] 
mbedtls: remove 'protocols' array from backend when ALPN is not used

Closes #8663

3 years agohttp2: RST the stream if we stop it on our own will
Daniel Stenberg [Fri, 1 Apr 2022 11:23:04 +0000 (13:23 +0200)] 
http2: RST the stream if we stop it on our own will

For the "simulated 304" case the done-call isn't considered "premature"
but since the server didn't close the stream it needs to be reset to
stop delivering data.

Closes #8664

3 years agohttp: close the stream (not connection) on time condition abort
Daniel Stenberg [Fri, 1 Apr 2022 11:22:58 +0000 (13:22 +0200)] 
http: close the stream (not connection) on time condition abort

Closes #8664

3 years agohttp2: handle DONE called for the paused stream
Daniel Stenberg [Fri, 1 Apr 2022 11:22:58 +0000 (13:22 +0200)] 
http2: handle DONE called for the paused stream

As it could otherwise stall all streams on the connection

Reported-by: Evangelos Foutras
Fixes #8626
Closes #8664

3 years agotls: make mbedtls and NSS check for h2, not nghttp2
Daniel Stenberg [Thu, 31 Mar 2022 14:04:00 +0000 (16:04 +0200)] 
tls: make mbedtls and NSS check for h2, not nghttp2

This makes them able to also negotiate HTTP/2 even when built to use
hyper for h2.

Closes #8656

3 years agotests/libtest/lib670.c: fixup the copyright year range
Daniel Stenberg [Thu, 31 Mar 2022 14:04:00 +0000 (16:04 +0200)] 
tests/libtest/lib670.c: fixup the copyright year range

follow-up to b54e18640ea4b7

3 years agolib670: avoid double check result
Leandro Coutinho [Thu, 31 Mar 2022 12:27:10 +0000 (14:27 +0200)] 
lib670: avoid double check result

Closes #8660

3 years agovtls: use a generic "ALPN, server accepted" message
Daniel Stenberg [Thu, 31 Mar 2022 12:21:01 +0000 (14:21 +0200)] 
vtls: use a generic "ALPN, server accepted" message

Closes #8657

3 years agovtls: use a backend standard message for "ALPN: offers %s"
Daniel Stenberg [Thu, 31 Mar 2022 12:20:55 +0000 (14:20 +0200)] 
vtls: use a backend standard message for "ALPN: offers %s"

I call it VTLS_INFOF_ALPN_OFFER_1STR, the '1str' meaning that the
infof() call also needs a string argument: the ALPN ID.

Closes #8657

3 years agostrcase.h: add comment about the return code
MonkeybreadSoftware [Thu, 31 Mar 2022 09:25:56 +0000 (11:25 +0200)] 
strcase.h: add comment about the return code

Tool often we run into expecting this to work like strcmp, but it
returns 1 instead of 0 for match.

Closes #8658

3 years agovtls: provide a unified APLN-disagree string for all backends
Daniel Stenberg [Wed, 30 Mar 2022 09:02:57 +0000 (11:02 +0200)] 
vtls: provide a unified APLN-disagree string for all backends

Also rephrase to make it sound less dangerous:

 "ALPN: server did not agree on a protocol. Uses default."

Reported-by: Nick Coghlan
Fixes #8643
Closes #8651

3 years agoprojects/README: converted to markdown
Daniel Stenberg [Wed, 30 Mar 2022 12:35:56 +0000 (14:35 +0200)] 
projects/README: converted to markdown

Closes #8652

3 years agomisc: spelling fixes
Daniel Stenberg [Wed, 30 Mar 2022 08:49:05 +0000 (10:49 +0200)] 
misc: spelling fixes

Mostly in comments but also in the -w documentation for headers_json.

Closes #8647

3 years agoKNOW_BUGS: HTTP3/Transfer closed with n bytes remaining to read
Daniel Stenberg [Wed, 30 Mar 2022 08:34:43 +0000 (10:34 +0200)] 
KNOW_BUGS: HTTP3/Transfer closed with n bytes remaining to read

"HTTP/3 does not support client certs" considered fixed, at least with
the ngtcp2 backend.

Closes #8523

3 years agoCURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs
Daniel Stenberg [Tue, 29 Mar 2022 16:11:03 +0000 (18:11 +0200)] 
CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs

Also add to quote.d. Add to TODO as something to add in a future.

Reported-by: anon00000000 on github
Closes #8602
Closes #8648

3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Tue, 29 Mar 2022 14:25:40 +0000 (16:25 +0200)] 
RELEASE-NOTES: synced

3 years agopop3/smtp: return *WEIRD_SERVER_REPLY when not understood 8506/head
Daniel Stenberg [Tue, 29 Mar 2022 12:01:48 +0000 (14:01 +0200)] 
pop3/smtp: return *WEIRD_SERVER_REPLY when not understood

This leaves the CURLE_RECV_ERROR error code for explicit failure to
receive network data and allows users to better separate the problems.

Ref #8356
Reported-by: Rianov Viacheslav
Closes #8506

3 years agodocs: lots of minor language polish
Daniel Stenberg [Tue, 29 Mar 2022 11:58:11 +0000 (13:58 +0200)] 
docs: lots of minor language polish

Mostly based on recent language decisions from "everything curl":

- remove contractions (isn't => is not)
- *an* HTTP (consistency)
- runtime (no hyphen)
- backend (no hyphen)
- URL is uppercase

Closes #8646

3 years agoprojects: Update VC version names for VS2017, VS2022
Jay Satiro [Sun, 13 Feb 2022 21:58:04 +0000 (16:58 -0500)] 
projects: Update VC version names for VS2017, VS2022

- Rename VC15 -> VC14.10, VC17 -> VC14.30.

The projects directory that holds the pre-generated Visual Studio
project files uses VC<ver> to indicate the MSVC version. At some point
support for Visual Studio 2017 (Visual Studio version 15 which uses MSVC
14.10) was added as VC15. Visual Studio 2022 (Visual Studio version 17
which uses MSVC 14.30) project files were recently added and followed
that same format using VC17.

There is no such MSVC version (yet) as VC15 or VC17.

For VS 2017 for example, the name we use is correct as either VS17,
VS2017, VC14.10. I opted for the latter since we use VC for earlier
versions (eg VC10, VC12, etc).

Ref: https://github.com/curl/curl/pull/8438#issuecomment-1037070192

Closes https://github.com/curl/curl/pull/8447

3 years agomqtt: better handling of TCP disconnect mid-message
Daniel Stenberg [Tue, 29 Mar 2022 06:43:13 +0000 (08:43 +0200)] 
mqtt: better handling of TCP disconnect mid-message

Reported-by: Jenny Heino
Bug: https://hackerone.com/reports/1521610
Closes #8644

3 years agoCURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL
Daniel Stenberg [Mon, 28 Mar 2022 17:40:47 +0000 (19:40 +0200)] 
CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL

3 years agodocs/DYNBUF: clarify documentation for Curl_dyn_ptr and Curl_dyn_uptr
Ian Blanes [Mon, 28 Mar 2022 07:39:09 +0000 (09:39 +0200)] 
docs/DYNBUF: clarify documentation for Curl_dyn_ptr and Curl_dyn_uptr

Closes #8606

3 years agocurl: fix segmentation fault for empty output file names.
Ian Blanes [Mon, 28 Mar 2022 07:39:09 +0000 (09:39 +0200)] 
curl: fix segmentation fault for empty output file names.

Function glob_match_url set *result to NULL when called with filename =
"", producing an indirect NULL pointer dereference.

Closes #8606

3 years agoTODO: Read keys from ~/.ssh/id_ecdsa, id_ed25519
Daniel Stenberg [Sun, 27 Mar 2022 14:21:29 +0000 (16:21 +0200)] 
TODO: Read keys from ~/.ssh/id_ecdsa, id_ed25519

It would be nice to expand the list of key locations curl uses for the
newer key types supported by libssh2.

Closes #8586

3 years agongtcp2: update to work after recent ngtcp2 updates
Daniel Stenberg [Sat, 26 Mar 2022 17:32:13 +0000 (18:32 +0100)] 
ngtcp2: update to work after recent ngtcp2 updates

Assisted-by: Tatsuhiro Tsujikawa
Reported-by: jurisuk on github
Fixes #8638
Closes #8639

3 years agoCURLOPT_PROGRESSFUNCTION.3: fix typo in example
Farzin [Fri, 25 Mar 2022 15:26:24 +0000 (19:56 +0430)] 
CURLOPT_PROGRESSFUNCTION.3: fix typo in example

Closes #8636

3 years agocurl/header_json: output the header names in lowercase
Daniel Stenberg [Fri, 25 Mar 2022 10:24:27 +0000 (11:24 +0100)] 
curl/header_json: output the header names in lowercase

To better allow json[“header”].

Reported-by: Peter Korsgaard
Bug: https://daniel.haxx.se/blog/2022/03/24/easier-header-picking-with-curl/comment-page-1/#comment-25878
Closes #8633

3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Thu, 24 Mar 2022 14:51:43 +0000 (15:51 +0100)] 
RELEASE-NOTES: synced

3 years agoheaders.h: make Curl_headers_push() be CURLE_OK when not built
Daniel Stenberg [Wed, 23 Mar 2022 22:54:18 +0000 (23:54 +0100)] 
headers.h: make Curl_headers_push() be CURLE_OK when not built

... to avoid errors when the function isn't there.

Reported-by: Marcel Raad
Fixes #8627
Closes #8628

3 years agoscripts: move three scripts from lib/ to scripts/
Daniel Stenberg [Wed, 23 Mar 2022 14:26:09 +0000 (15:26 +0100)] 
scripts: move three scripts from lib/ to scripts/

Move checksrc.pl, firefox-db2pem.sh and mk-ca-bundle.pl since they don't
particularly belong in lib/

Also created an EXTRA_DIST= in scripts/Makefile.am instead of specifying
those files in the root Makefile.am

Closes #8625

3 years agolib/warnless.[ch]: only check for WIN32 and ignore _WIN32
Marc Hoersken [Mon, 14 Mar 2022 23:17:58 +0000 (00:17 +0100)] 
lib/warnless.[ch]: only check for WIN32 and ignore _WIN32

curl_setup.h automatically defines WIN32 if just _WIN32 is defined.

Therefore make sure curl_setup.h is included through warnless.h.

Reviewed-by: Daniel Stenberg
Reviewed-by: Jay Satiro
Closes #8594

3 years agotests/server/util.h: align WIN32 condition with util.c
Marc Hoersken [Mon, 14 Mar 2022 23:16:46 +0000 (00:16 +0100)] 
tests/server/util.h: align WIN32 condition with util.c

There is no need to test for both _WIN32 and WIN32 as curl_setup.h
automatically defines the later if the first one is defined.

Also tests/server/util.c is only checking for WIN32 arouund the
implementation of win32_perror, so just defining _WIN32
would not be sufficient for a successful compilation.

Reviewed-by: Daniel Stenberg
Reviewed-by: Jay Satiro
Closes #8594

3 years agofirefox-db2pem.sh: make the shell script safer
Philip H [Tue, 22 Mar 2022 22:13:41 +0000 (23:13 +0100)] 
firefox-db2pem.sh: make the shell script safer

Reported by lift

Closes #8616

3 years agogtls: fix build for disabled TLS-SRP
Jay Satiro [Thu, 17 Mar 2022 19:31:10 +0000 (15:31 -0400)] 
gtls: fix build for disabled TLS-SRP

Prior to this change if, at build time, the GnuTLS backend was found to
have TLS-SRP support (HAVE_GNUTLS_SRP) but TLS-SRP was disabled in curl
via --disable-tls-srp (!USE_TLS_SRP) then a build error would occur.

Bug: https://curl.se/mail/lib-2022-03/0046.html
Reported-by: Robert Brose
Closes https://github.com/curl/curl/pull/8604

3 years agowinbuild: Add a Visual Studio example to the README
Jay Satiro [Sun, 13 Mar 2022 22:45:39 +0000 (18:45 -0400)] 
winbuild: Add a Visual Studio example to the README

- Add an example that explains in detail how the user can add libcurl to
  their Visual Studio project.

Ref: https://github.com/curl/curl/issues/8591

Closes https://github.com/curl/curl/pull/8592

3 years agodocs/opts: Mention Schannel client cert type is P12
Jay Satiro [Sat, 12 Mar 2022 23:23:12 +0000 (18:23 -0500)] 
docs/opts: Mention Schannel client cert type is P12

Schannel backend code behaves same as Secure Transport, it expects a P12
certificate file or the name of a certificate already in the user's OS
key store. Also, both backends ignore CURLOPT_SSLKEY (tool: --key)
because they expect the private key to already be available from the
keystore or P12 certificate.

Ref: https://github.com/curl/curl/discussions/8581#discussioncomment-2337260

Closes https://github.com/curl/curl/pull/8587

3 years agolib1945: fix compiler warning 4706 on MSVC
Daniel Stenberg [Tue, 22 Mar 2022 14:29:55 +0000 (15:29 +0100)] 
lib1945: fix compiler warning 4706 on MSVC

Follow-up from d1e4a677340c

Closes #8623

3 years agoci/event-based.yml: improve impacket install
Philip H [Tue, 22 Mar 2022 11:25:34 +0000 (12:25 +0100)] 
ci/event-based.yml: improve impacket install

skip python3-pip
install impacket with library module

Closes #8621

3 years agotest1459: disable for oldlibssh
Daniel Stenberg [Tue, 22 Mar 2022 12:37:48 +0000 (13:37 +0100)] 
test1459: disable for oldlibssh

This test with libssh 0.9.3 works fine on github but fails on circleci.
Might as well disable this test for oldlibssh installations.

Closes #8622

3 years agotest1135: sync with recent API updates
Daniel Stenberg [Tue, 22 Mar 2022 10:14:45 +0000 (11:14 +0100)] 
test1135: sync with recent API updates

This test verifies that the order of functions in public headers remain
the same but hasn't been updated to care for recently added header
files. The order is important for some few platforms - or VERSIONINFO
needs to updated.

This fix also updates VERSIONINFO to be sure.

Closes #8620

3 years agocurl_easy_nextheader.3: fix two typos
Daniel Stenberg [Tue, 22 Mar 2022 10:52:37 +0000 (11:52 +0100)] 
curl_easy_nextheader.3: fix two typos

Reported-by: Timothe Litt
Bug: https://curl.se/mail/lib-2022-03/0060.html

3 years agooptions: remove mistaken space before paren in prototype
Daniel Stenberg [Tue, 22 Mar 2022 10:09:22 +0000 (11:09 +0100)] 
options: remove mistaken space before paren in prototype

3 years agocirrus: add --enable-headers-api for some windows builds
Daniel Stenberg [Sat, 19 Mar 2022 21:50:26 +0000 (22:50 +0100)] 
cirrus: add --enable-headers-api for some windows builds

3 years agoGHA: --enable-headers-api in all workflows
Daniel Stenberg [Sat, 19 Mar 2022 21:47:29 +0000 (22:47 +0100)] 
GHA: --enable-headers-api in all workflows

3 years agolib: make the headers API depend on --enable-headers-api
Daniel Stenberg [Sat, 19 Mar 2022 21:40:20 +0000 (22:40 +0100)] 
lib: make the headers API depend on --enable-headers-api

3 years agoconfigure: add --enable-headers-api to enable the headers API
Daniel Stenberg [Sat, 19 Mar 2022 21:34:19 +0000 (22:34 +0100)] 
configure: add --enable-headers-api to enable the headers API

Defaults to disabled while labeled EXPERIMENTAL.

Make all the headers API tests require 'headers-api' to run.

3 years agotest1671: verify -w '%{header_json}
Daniel Stenberg [Thu, 17 Mar 2022 22:11:22 +0000 (23:11 +0100)] 
test1671: verify -w '%{header_json}

3 years agotest1670: verify -w %header{}
Daniel Stenberg [Thu, 17 Mar 2022 22:07:56 +0000 (23:07 +0100)] 
test1670: verify -w %header{}

3 years agocurl: add %{header_json} support in -w handling
Daniel Stenberg [Thu, 17 Mar 2022 16:55:06 +0000 (17:55 +0100)] 
curl: add %{header_json} support in -w handling

Outputs all response headers as a JSON object.

3 years agocurl: add %header{name} support in -w handling
Daniel Stenberg [Thu, 17 Mar 2022 15:32:45 +0000 (16:32 +0100)] 
curl: add %header{name} support in -w handling

Outputs the response header 'name'

3 years agoheader api: add curl_easy_header and curl_easy_nextheader
Daniel Stenberg [Thu, 17 Mar 2022 09:20:19 +0000 (10:20 +0100)] 
header api: add curl_easy_header and curl_easy_nextheader

Add test 1940 to 1946 to verify.

Closes #8593

3 years agotest1459: remove the different exit code for oldlibssh
Daniel Stenberg [Mon, 21 Mar 2022 16:39:49 +0000 (17:39 +0100)] 
test1459: remove the different exit code for oldlibssh

When using libssh/0.9.3/openssl/zlib, we seem to be getting the "right"
error code.

Closes #8490

3 years agolibssh: unstick SFTP transfers when done event-based
Daniel Stenberg [Mon, 21 Mar 2022 16:39:49 +0000 (17:39 +0100)] 
libssh: unstick SFTP transfers when done event-based

Test 604 and 606 (at least).

Closes #8490

3 years agogha: move the event-based test over from Zuul
Daniel Stenberg [Mon, 21 Mar 2022 16:39:49 +0000 (17:39 +0100)] 
gha: move the event-based test over from Zuul

Switched libssh2 to libssh

Closes #8490

3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Mon, 21 Mar 2022 07:43:14 +0000 (08:43 +0100)] 
RELEASE-NOTES: synced

3 years agohttp: return error on colon-less HTTP headers
Daniel Stenberg [Fri, 18 Mar 2022 21:54:59 +0000 (22:54 +0100)] 
http: return error on colon-less HTTP headers

It's a protocol violation and accepting them leads to no good.

Add test case 398 to verify

Closes #8610

3 years agotest718: edited slightly to return better HTTP
Daniel Stenberg [Sun, 20 Mar 2022 15:51:03 +0000 (16:51 +0100)] 
test718: edited slightly to return better HTTP

Since hyper is picky and won't play ball otherwise.

Bug: https://github.com/hyperium/hyper/issues/2783
Reported-by: Daniel Valenzuela
Closes #8614

3 years agohyper: no h2c support
Daniel Stenberg [Sat, 19 Mar 2022 22:12:03 +0000 (23:12 +0100)] 
hyper: no h2c support

Make tests require h2c feature present to run, and only set h2c if
nghttp2 is used in the build. Hyper does not support it.

Remove those tests from DISABLED

Fixes #8605
Closes #8613

3 years agoconfigure: bump the copyright year range int the generated output
Daniel Stenberg [Sat, 19 Mar 2022 21:21:30 +0000 (22:21 +0100)] 
configure: bump the copyright year range int the generated output

3 years agoBINDINGS.md: add Hollywood binding
Andreas Falkenhahn [Fri, 18 Mar 2022 21:56:52 +0000 (22:56 +0100)] 
BINDINGS.md: add Hollywood binding

Closes #8609

3 years agoHISTORY: add some 2022 data
Daniel Stenberg [Fri, 18 Mar 2022 09:04:20 +0000 (10:04 +0100)] 
HISTORY: add some 2022 data

3 years agoscripts/copyright.pl: ignore the new mlc_config.json file
Daniel Stenberg [Fri, 18 Mar 2022 08:15:15 +0000 (09:15 +0100)] 
scripts/copyright.pl: ignore the new mlc_config.json file

3 years agomlc_config.json: add file to ignore known troublesome URLs
Philip H [Tue, 15 Mar 2022 18:39:43 +0000 (19:39 +0100)] 
mlc_config.json: add file to ignore known troublesome URLs

This is the config file for the CI markdown link checker and lets us
filter URLs that are known to cause problems. Like
https://curl.zuul.vexxhost.dev/ for now.

Closes #8597

3 years agowinbuild/README.md: fixup dead link
Philip H [Tue, 15 Mar 2022 15:19:10 +0000 (16:19 +0100)] 
winbuild/README.md: fixup dead link

Closes #8597

3 years agortsp: don't let CSeq error override earlier errors
Jay Satiro [Mon, 28 Feb 2022 19:28:37 +0000 (14:28 -0500)] 
rtsp: don't let CSeq error override earlier errors

- When done, if an error has already occurred then don't check the
  sequence numbers for mismatch.

A sequence number may not have been received if an error occurred.

Prior to this change a sequence mismatch error would override earlier
errors. For example, a server that returns nothing would cause error
CURLE_GOT_NOTHING in Curl_http_done which was then overridden by
CURLE_RTSP_CSEQ_ERROR in rtsp_done.

Closes https://github.com/curl/curl/pull/8525

3 years agolib: fix some misuse of curlx_convert_wchar_to_UTF8
Jay Satiro [Mon, 28 Feb 2022 08:12:12 +0000 (03:12 -0500)] 
lib: fix some misuse of curlx_convert_wchar_to_UTF8

curlx_convert_wchar_to_UTF8 must be freed by curlx_unicodefree, but
prior to this change some uses mistakenly called free.

I've reviewed all other uses of curlx_convert_wchar_to_UTF8 and
curlx_convert_UTF8_to_wchar.

Ref: https://github.com/curl/curl/commit/1d5d0ae

Closes https://github.com/curl/curl/pull/8521

3 years agomk-ca-bundle.pl: Use stricter logic to process the certificates
Jay Satiro [Wed, 9 Feb 2022 08:19:01 +0000 (03:19 -0500)] 
mk-ca-bundle.pl: Use stricter logic to process the certificates

.. and bump version to 1.29.

This change makes the script properly ignore unknown blocks and
otherwise fail when Mozilla changes the certdata format in ways we
don't expect. Though this is less flexible behavior it makes it far less
likely that an invalid certificate can slip through.

Prior to this change the state machine did not always properly reset,
and it was possible that a certificate marked as invalid could then
later be marked as valid when there was conflicting trust info or
an unknown block was erroneously processed as part of the certificate.

Ref: https://github.com/curl/curl/pull/7801#pullrequestreview-768384569

Closes https://github.com/curl/curl/pull/8411

3 years agotest375: fix line endings on Windows
Marcel Raad [Wed, 16 Mar 2022 09:19:45 +0000 (10:19 +0100)] 
test375: fix line endings on Windows

Closes https://github.com/curl/curl/pull/8599

3 years agohttp: reject header contents with nul bytes
Daniel Stenberg [Wed, 16 Mar 2022 22:12:28 +0000 (23:12 +0100)] 
http: reject header contents with nul bytes

They are not allowed by the protocol and allowing them risk that curl
misbehaves somewhere where C functions are used but won't work on the
full contents. Further, they are not supported by hyper and they cause
problems for the new coming headers API work.

Updated test 262 to verify and enabled it for hyper as well

Closes #8601

3 years agoCI: Do not use buildconf. Instead, just use: autoreconf -fi
Philip H [Tue, 15 Mar 2022 09:25:25 +0000 (10:25 +0100)] 
CI: Do not use buildconf. Instead, just use: autoreconf -fi

Closes #8596

3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Tue, 15 Mar 2022 09:48:47 +0000 (10:48 +0100)] 
RELEASE-NOTES: synced

3 years agolibssh: Improve fix for missing SSH_S_ stat macros
Jay Satiro [Sat, 12 Mar 2022 23:48:18 +0000 (18:48 -0500)] 
libssh: Improve fix for missing SSH_S_ stat macros

- If building libcurl against an old libssh version missing SSH_S_IFMT
  and SSH_S_IFLNK then use the values from a supported version.

Prior to this change if libssh did not define SSH_S_IFMT and SSH_S_IFLNK
then S_IFMT and S_IFLNK, respectively, were used instead. The problem
with that is the user's S_ stat macros don't have the same values across
platforms. For example Windows has values different from Linux.

Follow-up to 7b0fd39.

Ref: https://github.com/curl/curl/pull/8511#discussion_r815292391
Ref: https://github.com/curl/curl/pull/8574

Closes https://github.com/curl/curl/pull/8588

3 years agotool and tests: force flush of all buffers at end of program
Marc Hoersken [Sat, 26 Feb 2022 13:34:42 +0000 (14:34 +0100)] 
tool and tests: force flush of all buffers at end of program

On Windows data can be lost in buffers in case of abnormal program
termination, especially in process chains as seen due to flaky tests.
Therefore flushing all buffers manually should avoid this data loss.

In the curl tool we play the safe game by only flushing write buffers,
but in the testsuite where we manage all buffers, we flush everything.

This should drastically reduce Windows CI and testsuite flakiness.

Reviewed-by: Daniel Stenberg
Supersedes #7833 and #6064
Closes #8516

3 years agoBearSSL: add CURLOPT_SSL_CTX_FUNCTION support
Jan Venekamp [Sat, 19 Feb 2022 14:34:47 +0000 (15:34 +0100)] 
BearSSL: add CURLOPT_SSL_CTX_FUNCTION support

Closes #8478

3 years agoBearSSL: add CURLOPT_SSL_CIPHER_LIST support
Jan Venekamp [Mon, 6 Dec 2021 17:36:03 +0000 (18:36 +0100)] 
BearSSL: add CURLOPT_SSL_CIPHER_LIST support

Closes #8477

3 years agotool_cb_hdr: Turn the Location: into a terminal hyperlink
Dan Fandrich [Fri, 5 Nov 2021 05:02:05 +0000 (22:02 -0700)] 
tool_cb_hdr: Turn the Location: into a terminal hyperlink

This turns even relative URLs into clickable hyperlinks in a supported
terminal when --styled-output is enabled. Many terminals already turn
URLs into clickable links but there is not enough information in a
relative URL to do this automatically otherwise.

3 years agokeepalive-time.d: It takes many probes to detect brokenness
Dan Fandrich [Thu, 10 Mar 2022 06:11:13 +0000 (22:11 -0800)] 
keepalive-time.d: It takes many probes to detect brokenness

3 years agocurl: add --no-clobber
HexTheDragon [Sun, 12 Sep 2021 04:36:21 +0000 (20:36 -0800)] 
curl: add --no-clobber

Does not overwrite output files if they already exist

Closes #7708
Co-authored-by: Daniel Stenberg
3 years agoRELEASE-NOTES: synced
Daniel Stenberg [Fri, 11 Mar 2022 07:00:56 +0000 (08:00 +0100)] 
RELEASE-NOTES: synced

also bump next pending version to become 7.83.0

3 years agoopenssl: check SSL_get_peer_cert_chain return value
Jean-Philippe Menil [Thu, 10 Mar 2022 20:32:18 +0000 (21:32 +0100)] 
openssl: check SSL_get_peer_cert_chain return value

Signed-off-by: Jean-Philippe Menil <jpmenil@gmail.com>
Closes #8579