PaulHowarth/Blog/2018-12-12

Wednesday 12th December 2018

Local Packages

  • Updated curl to 7.63.0:

    • curl: Add %{stderr} and %{stdout} for --write-out

    • curl: Add undocumented option --dump-module-paths for win32

    • setopt: Add CURLOPT_CURLU

    • (lib)curl.rc: Fixup for minor bugs

    • CURLINFO_REDIRECT_URL: Extract the Location: header field unvalidated

    • CURLOPT_HEADERFUNCTION.3: Match 'nitems' name in synopsis and description

    • CURLOPT_WRITEFUNCTION.3: Spell out that it gets called many times

    • Curl_follow: Accept non-supported schemes for "fake" redirects

    • KNOWN_BUGS: Add --proxy-any connection issue

    • NTLM: Remove redundant ifdef USE_OPENSSL

    • NTLM: Force the connection to HTTP/1.1
    • OS400: Add URL API ccsid wrappers and sync ILE/RPG bindings
    • SECURITY-PROCESS: bountygraph shuts down again

    • TODO: Have the URL API offer IDN decoding

    • ares: Remove fd from multi fd set when ares is about to close the fd

    • axtls: Removed

    • checksrc: Add COPYRIGHTYEAR check

    • cmake: Fix MIT/Heimdal Kerberos detection

    • configure: Include all libraries in ssl-libs fetch

    • configure: Show CFLAGS, LDFLAGS etc. in summary

    • connect: Fix building for recent versions of Minix

    • cookies: Create the cookiejar even if no cookies to save
    • cookies: Expire "Max-Age=0" immediately

    • curl: --local-port range was not "including"

    • curl: Fix --local-port integer overflow

    • curl: Fix memory leak reading --writeout from file

    • curl: Fixed UTF-8 in current console code page (Windows)

    • curl_easy_perform: Fix timeout handling

    • curl_global_sslset(): id == -1 is not necessarily an error

    • curl_multibyte: Fix a malloc overcalculation

    • curle: Move deprecated error code to ifndef block

    • docs: curl_formadd field and file names are now escaped

    • docs: Escape "\n" codes

    • doh: Fix memory leak in OOM situation
    • doh: Make it work for h2-disabled builds too
    • examples/ephiperfifo: Report error when epoll_ctl fails

    • ftp: Avoid two unsigned int overflows in FTP listing parser
    • host names: Allow trailing dot in name resolve, then strip it
    • http2: Upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1

    • http: Don't set CURLINFO_CONDITION_UNMET for http status code 204

    • http: Fix HTTP Digest auth to include query in URI
    • http_negotiate: Do not close connection until negotiation is completed

    • impacket: Add LICENSE

    • infof: Clearly indicate truncation

    • ldap: Fix LDAP URL parsing regressions
    • libcurl: Stop reading from paused transfers

    • mprintf: Avoid unsigned integer overflow warning

    • netrc: Don't ignore the login name specified with "--user"

    • nss: Fall back to latest supported SSL version

    • nss: Fix compatibility with nss versions 3.14 to 3.15
    • nss: Fix fallthrough comment to fix picky compiler warning
    • nss: Remove version selecting dead code
    • nss: Set default max-tls to 1.3/1.2
    • openssl: Remove SSLEAY leftovers

    • openssl: Do not log excess "TLS app data" lines for TLS 1.3
    • openssl: Do not use file BIOs if not requested
    • openssl: Fix unused variable compiler warning with old openssl
    • openssl: Support session resume with TLS 1.3
    • openvms: Fix example name
    • os400: Add curl_easy_conn_upkeep() to ILE/RPG binding

    • os400: Add CURLOPT_CURLU to ILE/RPG binding

    • os400: Fix return type of curl_easy_pause() in ILE/RPG binding

    • packages: Remove old leftover files and dirs
    • pop3: Only do APOP with a valid timestamp

    • runtests: Use the local curl for verifying

    • schannel: Be consistent in Schannel capitalization
    • schannel: Better CURLOPT_CERTINFO support

    • schannel: Use Curl_ prefix for global private symbols

    • snprintf: Renamed and we now only use msnprintf()

    • ssl: Fix compilation with OpenSSL 0.9.7
    • ssl: Replace all internal uses of CURLE_SSL_CACERT

    • symbols-in-versions: Add missing CURLU_ symbols

    • test328: Verify Content-Encoding: none

    • tests: Disable SO_EXCLUSIVEADDRUSE for stunnel on Windows

    • tests: Drop http_pipe.py script, no longer used

    • tool_cb_wrt: Silence function cast compiler warning

    • tool_doswin: Fix uninitialized field warning

    • travis: Build with clang sanitizers

    • travis: Remove curl before a normal build

    • url: A short host name + port is not a scheme
    • url: Fix IPv6 numeral address parser
    • urlapi: Only skip encoding the first '=' with APPENDQUERY set


Recent