Recent Activity in the repo

M docs/examples/Makefile.inc

I found a bug which cURL sends cookies to the path not to aim at. For example: - cURL sends a request to http://example.fake/hoge/ - server returns cookie which with path=/hoge; the point is there is NOT the '/' end of path string. - cURL sends a request to http://example.fake/hogege/ with the cookie.

The reason for this old "feature" is because that behavior is what is described in the original netscape cookie spec: http://curl.haxx.se/rfc/cookie_spec.html

The current cookie spec (RFC6265) clarifies the situation: http://tools.ietf.org/html/rfc6265#section-5.2.4

M lib/cookie.c
M tests/data/Makefile.am
A tests/data/test1228
M tests/data/test46
M tests/data/test8

This reverts commit 8ec2cb5544b86306b702484ea785b6b9596562ab.

We don't have any code anywhere in libcurl (or the curl tool) that use wcsdup so there's no such memory use to track. It seems to cause mild problems with the Borland compiler though that we may avoid by reverting this change again.

Bug: http://curl.haxx.se/mail/lib-2013-05/0070.html

M lib/curl_memory.h
M lib/curl_setup.h
M lib/easy.c
M lib/memdebug.c
M lib/memdebug.h
M tests/memanalyze.pl
M tests/server/getpart.c

M docs/INSTALL
M docs/examples/Makefile.m32
M docs/examples/Makefile.netware
M lib/Makefile.Watcom
M lib/Makefile.b32
M lib/Makefile.m32
M lib/Makefile.netware
M lib/Makefile.vc6
M lib/Makefile.vxworks
M src/Makefile.Watcom
M src/Makefile.b32
M src/Makefile.m32
M src/Makefile.netware
M src/Makefile.vc6

Reported by: David Strauss Bug: http://curl.haxx.se/mail/lib-2013-05/0088.html

M lib/nss.c

Bug: http://curl.haxx.se/bug/view.cgi?id=1220 Patch by: John Gardiner Myers

M lib/ssluse.c

M tests/FILEFORMAT
M tests/runtests.pl

M src/tool_getparam.c
M src/tool_getparam.h
A tests/data/test1394
M tests/unit/Makefile.inc
M tests/unit/unit1394.c

M src/Makefile.am
M src/tool_main.c
M tests/unit/Makefile.am

M src/tool_getparam.c

M docs/curl.1

M lib/curl_schannel.c
M lib/urldata.h

comparison between signed and unsigned integer expressions

M lib/smtp.c

M lib/smtp.c

... which was missed in commit: f5c3d9538452

M tests/data/test1406

M tests/data/test1406

Introduced in commit: 514817669e9e

M tests/data/test909

...and removed references to libcurl and test1406.

M tests/data/test909

The code within #ifdef HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID wrongly had two closing braces when it should only have one, so builds without that define would fail.

Bug: http://curl.haxx.se/mail/lib-2013-05/0000.html

M lib/connect.c

M docs/TODO

Fix regressions in commit b56e3d43e5d. Make @data local and filter off non-numerical digits from $testno in STATUS_imap.

M tests/ftpserver.pl

M tests/data/Makefile.am
A tests/data/test809
M tests/ftpserver.pl

Removed the hard returns from imap and pop3 by using the same style for sending the authentication string as smtp. Moved the "Other mechanisms not supported" check in smtp to match that of imap and pop3 to provide consistency between the three email protocols.

M lib/imap.c
M lib/pop3.c
M lib/smtp.c

Added 255 octet limit check as per Section 4. Paragraph 8 of RFC-5034.

M lib/pop3.c

Users using the Secure Transport (darwinssl) back-end can now use a certificate and private key to authenticate with a site using TLS. Because Apple's security system is based around the keychain and does not have any non-public function to create a SecIdentityRef data structure from data loaded outside of the Keychain, the certificate and private key have to be loaded into the Keychain first (using the certtool command line tool or the Security framework's C API) before we can find it and use it.

M RELEASE-NOTES
M docs/curl.1
M docs/libcurl/curl_easy_setopt.3
M lib/curl_darwinssl.c

Since we're adding new stuff, the next release will bump the minor version and we're looking forward to 7.31.0

M RELEASE-NOTES
M include/curl/curlver.h

Documented the the option in curl_easy_setopt() and added it to symbols-in-versions.

M docs/libcurl/curl_easy_setopt.3
M docs/libcurl/symbols-in-versions

M tests/data/Makefile.am
A tests/data/test907
A tests/data/test908

In addition to checking for the SASL-IR capability the user can override the sending of the client's initial response in the AUTHENTICATION command with the use of CURLOPT_SASL_IR should the server erroneously not report SASL-IR when it does support it.

M lib/imap.c

Allowed the user to specify whether to send the client's intial response in the AUTH command via CURLOPT_SASL_IR.

M lib/pop3.c

M include/curl/curl.h
M lib/url.c
M lib/urldata.h

An IMAP server should response with the BYE continuation response before confirming the LOGOUT command was successful.

M tests/ftpserver.pl

... in order to prevent an artificial timeout event based on stale speed-check data from a previous network transfer. This commit fixes a regression caused by 9dd85bced56f6951107f69e581c872c1e7e3e58e.

Bug: https://bugzilla.redhat.com/906031

M RELEASE-NOTES
M lib/url.c

I couldn't figure out why the host key logic isn't working, but having it set to yes prevents my SSH-based test cases to run. I also don't see a strong need to use strict host key checking on this test server.

So I disabled it.

M tests/sshserver.pl

M docs/TODO

M docs/TODO

M RELEASE-NOTES

M docs/HISTORY

M lib/url.c

Verifies the timecond fix in commit c49ed0b6c0f

M tests/data/Makefile.am
A tests/data/test1511
M tests/libtest/Makefile.inc
A tests/libtest/lib1511.c

M docs/libcurl/curl_easy_setopt.3

Commit 11332577b3cb removed the length check that was performed by the old scanf() code.

M lib/url.c

M lib/urldata.h

Updated the naming convention of the login parameters to match those of other functions.

M lib/url.c

There is no need to perform separate clearing of data if a NULL option pointer is passed in. Instead this operation can be performed by simply not calling parse_login_details() and letting the rest of the code do the work.

M lib/url.c

setstropt_userpwd() was calling setstropt() in commit fddb7b44a79d to set each of the login details which would duplicate the strings and subsequently cause a memory leak.

M lib/url.c

M lib/url.c

In addition to parsing the optional login options from the URL, added support for parsing them from CURLOPT_USERPWD, to allow the following supported command line:

--user username:password;options

M lib/url.c
M lib/urldata.h

M lib/url.c

When cross-compiling we can't scan and detect existing files or paths.

Bug: http://curl.haxx.se/mail/lib-2013-04/0294.html

M acinclude.m4