1720 lines
		
	
	
		
			78 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			1720 lines
		
	
	
		
			78 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
                                  _   _ ____  _
 | 
						||
                              ___| | | |  _ \| |
 | 
						||
                             / __| | | | |_) | |
 | 
						||
                            | (__| |_| |  _ <| |___
 | 
						||
                             \___|\___/|_| \_\_____|
 | 
						||
 | 
						||
                                  Changelog
 | 
						||
 | 
						||
Version 7.19.2 (13 November 2008)
 | 
						||
 | 
						||
Michal Marek (13 Nov 2008)
 | 
						||
- Fixed a potential data loss in Curl_client_write() when the transfer is
 | 
						||
  paused.
 | 
						||
 | 
						||
Daniel Stenberg (11 Nov 2008)
 | 
						||
- Rainer Canavan filed bug #2255627
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2255627) which pointed out that a
 | 
						||
  program using libcurl's multi interface to download a HTTPS page with a
 | 
						||
  libcurl built powered by OpenSSL, would easily get silly and instead hand
 | 
						||
  over SSL details as data instead of the actual HTTP headers and body. This
 | 
						||
  happened because libcurl would consider the connection handshake done too
 | 
						||
  early. This problem was introduced at September 22nd 2008 with my fix of the
 | 
						||
  bug #2107377
 | 
						||
 | 
						||
  The correct fix is now instead done within the GnuTLS-handling code, as both
 | 
						||
  the OpenSSL and the NSS code already deal with this situation in similar
 | 
						||
  fashion. I added test case 560 in an attempt to verify this fix, but
 | 
						||
  unfortunately it didn't trigger it even before this fix!
 | 
						||
 | 
						||
Yang Tse (11 Nov 2008)
 | 
						||
- Related with bug #2230535 (http://curl.haxx.se/bug/view.cgi?id=2230535)
 | 
						||
  Daniel Fandrich noticed that curl_addrinfo was also missing in the build
 | 
						||
  process of other four non-configure platforms. Added now.
 | 
						||
 | 
						||
Daniel Fandrich (7 Nov 2008)
 | 
						||
- The getifaddrs() version of Curl_if2ip() crashed when used on a Linux
 | 
						||
  system with a TEQL load-balancing device configured, which doesn't
 | 
						||
  have an address.  Thanks to Adam Sampson for spotting this (bug #2234923).
 | 
						||
 | 
						||
Yang Tse (6 Nov 2008)
 | 
						||
- Merged existing IPv4 and IPv6 Curl_ip2addr functions into a single one
 | 
						||
  which now also takes a protocol address family argument.
 | 
						||
 | 
						||
- Bug #2230535 (http://curl.haxx.se/bug/view.cgi?id=2230535) pointed out a
 | 
						||
  problem with MSVC 6 makefile that caused a build failure. It was noted that
 | 
						||
  the curl_addrinfo.obj reference was missing. I took the opportunity to sort
 | 
						||
  the list in which this was missing. Issue submitted by John Wilkinson.
 | 
						||
 | 
						||
Version 7.19.1 (5 November 2008)
 | 
						||
 | 
						||
Daniel Stenberg (4 Nov 2008)
 | 
						||
- CURLINFO_FILETIME now works for file:// transfers as well
 | 
						||
 | 
						||
Daniel Stenberg (3 Nov 2008)
 | 
						||
- Bug #2218480 (http://curl.haxx.se/bug/view.cgi?id=2218480) pointed out a
 | 
						||
  problem with my CURLINFO_PRIMARY_IP fix from October 7th that caused a NULL
 | 
						||
  pointer read. I also took the opportunity to clean up this logic (storing of
 | 
						||
  the connection's IP address) somewhat as we had it stored in two different
 | 
						||
  places and ways previously and they are now unified.
 | 
						||
 | 
						||
Yang Tse (3 Nov 2008)
 | 
						||
- Fix undersized IPv6 address internal buffer. IPv6 address strings longer
 | 
						||
  than 35 characters would be truncated.
 | 
						||
 | 
						||
Daniel Stenberg (2 Nov 2008)
 | 
						||
- Daniel Johnson reported and fixed:
 | 
						||
 | 
						||
  When c-ares isn't enabled, libcurl by default calls getaddrinfo with family
 | 
						||
  set to PF_UNSPEC which causes getaddrinfo to return all available addresses,
 | 
						||
  both IPv4 and IPv6. Libcurl then tries each one until it can connect. If the
 | 
						||
  net connection doesn't support IPv6, libcurl can still fall back to IPv4.
 | 
						||
 | 
						||
  However, since c-ares doesn't support PF_UNSPEC, when it's used it defaults
 | 
						||
  to using family=PF_INET6 and therefore only returns IPv6 addresses when AAAA
 | 
						||
  records are available, even if IPv4 addresses are also available. The effect
 | 
						||
  is that since my ISP doesn't do IPv6, libcurl can't connect at all to a site
 | 
						||
  that has AAAA records. It will work if I explicitly use CURL_IPRESOLVE_V4 or
 | 
						||
  --ipv4 with the curl tool. I discovered this when curl would fail to connect
 | 
						||
  to seemingly random sites. It turns out they weren't random, they were sites
 | 
						||
  with AAAA records.
 | 
						||
 | 
						||
  So now libcurl defaults to PF_INET... until c-ares has been tought to offer
 | 
						||
  both.
 | 
						||
 | 
						||
Yang Tse (31 Oct 2008)
 | 
						||
- Tests 558 and 559 are stabilized. These two tests were initially introduced
 | 
						||
  to aid in the location of a seg-fault which was only triggered on non-debug
 | 
						||
  builds done with the icc 9.1 Intel compiler. Test 558 does not trigger the
 | 
						||
  problem, but test 559 does trigger it. As of today, it isn't yet absolutely
 | 
						||
  clear if it is a compiler optimizer issue or a memory corruption one.
 | 
						||
 | 
						||
Yang Tse (30 Oct 2008)
 | 
						||
- Use our Curl_addrinfo structure definition to handle address info data even
 | 
						||
  when a system addrinfo struct is available. Provide and use a wrapper around
 | 
						||
  systems getaddrinfo function, Curl_getaddrinfo_ex which returns a pointer to
 | 
						||
  a list of dynamically allocated Curl_addrinfo structs.
 | 
						||
 | 
						||
  Configure will check freeaddrinfo and getaddrinfo functions and define
 | 
						||
  preprocessor symbols HAVE_FREEADDRINFO and HAVE_GETADDRINFO when appropriate.
 | 
						||
 | 
						||
Daniel Fandrich (29 Oct 2008)
 | 
						||
- Fixed a bug that caused a few bytes of garbage to be sent after a
 | 
						||
  curl_easy_pause() during a chunky upload. Reported by Steve Roskowski.
 | 
						||
 | 
						||
Daniel Fandrich (28 Oct 2008)
 | 
						||
- Changed the "resolve" test precheck program to verify that an IPv6 socket
 | 
						||
  can be created before resolving the IPv6 name.  In the context of running
 | 
						||
  a test, it doesn't make sense to run an IPv6 test when a host is resolvable
 | 
						||
  but IPv6 isn't usable.  This should fix failures of test 1085 on hosts with
 | 
						||
  library and DNS support for IPv6 but where actual use of IPv6 has been
 | 
						||
  administratively disabled.
 | 
						||
 | 
						||
Daniel Fandrich (24 Oct 2008)
 | 
						||
- Added experimental support for zlib and OpenSSL on Symbian OS.
 | 
						||
 | 
						||
Daniel Fandrich (21 Oct 2008)
 | 
						||
- Fixed some problems with SFTP range support to fix test cases 634 through
 | 
						||
  637.
 | 
						||
 | 
						||
Daniel Fandrich (17 Oct 2008)
 | 
						||
- Fixed a compile error reported by Albert Chin on AIX and IRIX when using
 | 
						||
  GTLS.
 | 
						||
 | 
						||
Daniel Stenberg (16 Oct 2008)
 | 
						||
- Igor Novoseltsev added CURLOPT_PROXYUSER and CURLOPT_PROXYPASSWORD that then
 | 
						||
  make CURLOPT_PROXYUSERPWD sort of deprecated. The primary motive for adding
 | 
						||
  these new options is that they have no problems with the colon separator
 | 
						||
  that the CURLOPT_PROXYUSERPWD option does.
 | 
						||
 | 
						||
Daniel Stenberg (15 Oct 2008)
 | 
						||
- Pascal Terjan filed bug #2154627
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2154627) which pointed out that libcurl
 | 
						||
  uses strcasecmp() in multiple places where it causes failures when the
 | 
						||
  Turkish locale is used. This is because 'i' and 'I' isn't the same letter so
 | 
						||
  strcasecmp() on those letters are different in Turkish than in English (or
 | 
						||
  just about all other languages). I thus introduced a totally new internal
 | 
						||
  function in libcurl (called Curl_raw_equal) for doing case insentive
 | 
						||
  comparisons for english-(ascii?) style strings that thus will make "file"
 | 
						||
  and "FILE" match even if the Turkish locale is selected.
 | 
						||
 | 
						||
Daniel Fandrich (15 Oct 2008)
 | 
						||
- A <precheck> command is considered to have failed if it returns a non-zero
 | 
						||
  return code.  This way, if the precheck command can't be run at all for
 | 
						||
  whatever reason, it's treated as a precheck failure which causes the
 | 
						||
  test to be skipped.
 | 
						||
 | 
						||
Daniel Stenberg (15 Oct 2008)
 | 
						||
- John Wilkinson filed bug #2155496
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2155496) pointing out an error case
 | 
						||
  without a proper human-readable error message. When a read callback returns
 | 
						||
  a too large value (like when trying to return a negative number) it would
 | 
						||
  trigger and the generic error message then makes the proplem slightly
 | 
						||
  different to track down. I've added an error message for this now.
 | 
						||
 | 
						||
Daniel Fandrich (9 Oct 2008)
 | 
						||
- Fixed the --interface option to work with IPv6 connections on glibc
 | 
						||
  systems supporting getifaddrs(). Also fixed a problem where an IPv6
 | 
						||
  address could be chosen instead of an IPv4 one for --interface when it
 | 
						||
  involved a name lookup.
 | 
						||
 | 
						||
Daniel Fandrich (8 Oct 2008)
 | 
						||
- Added tests 1082 through 1085 to test symbolic --interface parameters
 | 
						||
 | 
						||
- Added tests 633 through 637 to test the new file range support for SFTP.
 | 
						||
  All but the first test cause an infinite loop or other failure and so
 | 
						||
  are added to DISABLED.
 | 
						||
 | 
						||
Daniel Stenberg (8 Oct 2008)
 | 
						||
- John Wilkinson filed bug #2152270
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2152270) which identified and fixed a
 | 
						||
  CURLINFO_REDIRECT_URL memory leak and an additional wrong-doing:
 | 
						||
 | 
						||
  Any subsequent transfer with a redirect leaks memory, eventually crashing
 | 
						||
  the process potentially.
 | 
						||
 | 
						||
  Any subsequent transfer WITHOUT a redirect causes the most recent redirect
 | 
						||
  that DID occur on some previous transfer to still be reported.
 | 
						||
 | 
						||
- Igor Novoseltsev filed bug #2111613
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2111613) that eventually identified a
 | 
						||
  flaw in how the multi_socket interface in some cases missed to call the
 | 
						||
  timeout callback when easy interfaces are removed and added within the same
 | 
						||
  millisecond.
 | 
						||
 | 
						||
- Igor Novoseltsev brought a patch that introduced two new options to
 | 
						||
  curl_easy_setopt: CURLOPT_USERNAME and CURLOPT_PASSWORD that sort of
 | 
						||
  deprecates the good old CURLOPT_USERPWD since they allow applications to set
 | 
						||
  the user name and password independently and perhaps more importantly allow
 | 
						||
  both to contain colon(s) which CURLOPT_USERPWD doesn't fully support.
 | 
						||
 | 
						||
Daniel Fandrich (7 Oct 2008)
 | 
						||
- Changed the handling of read/write errors in Curl_perform() to allow a
 | 
						||
  a fresh connection to be made in such cases and the request retransmitted.
 | 
						||
  This should fix test case 160.  Added test case 1079 in an attempt to
 | 
						||
  test a similar connection dropping scenario, but as a race condition, it's
 | 
						||
  hard to test reliably.
 | 
						||
 | 
						||
- Created test cases 1080 and 1081 to reproduce a problem of
 | 
						||
  CURLINFO_REDIRECT_URL leaking memory and returning incorrect results when
 | 
						||
  two URLs are requested. Reported by vmpdemo in bug #2152270
 | 
						||
 | 
						||
Daniel Stenberg (7 Oct 2008)
 | 
						||
- Fixed CURLINFO_PRIMARY_IP: When libcurl created a connection to host A then
 | 
						||
  the app re-used the handle to do a connection to host B and then again
 | 
						||
  re-used the handle to host A, it would not update the info with host A's IP
 | 
						||
  address (due to the connection being re-used) but it would instead report
 | 
						||
  the info from host B.
 | 
						||
 | 
						||
Yang Tse (7 Oct 2008)
 | 
						||
- Added --enable-optimize configure option to enable and disable compiler
 | 
						||
  optimizations to allow decoupled setting from --enable-debug.
 | 
						||
 | 
						||
Yang Tse (2 Oct 2008)
 | 
						||
- Added --enable-warnings configure option to enable and disable strict
 | 
						||
  compiler warnings to allow decoupled setting from --enable-debug.
 | 
						||
 | 
						||
  runtests.pl will now run with picky compiler warnings enabled unless
 | 
						||
  explicitly disabled.
 | 
						||
  
 | 
						||
Daniel Fandrich (1 Oct 2008)
 | 
						||
- "make clean" now cleans out the docs and tests directories, too.
 | 
						||
 | 
						||
Daniel Stenberg (30 Sep 2008)
 | 
						||
- The libcurl FTP code now returns CURLE_REMOTE_FILE_NOT_FOUND error when SIZE
 | 
						||
  gets a 550 response back for the cases where a download (or NOBODY) is
 | 
						||
  wanted. It still allows a 550 as response if the SIZE is used as part of an
 | 
						||
  upload process (like if resuming an upload is requested and the file isn't
 | 
						||
  there before the upload). I also modified the FTP test server and a few test
 | 
						||
  cases accordingly to match this modified behavior.
 | 
						||
 | 
						||
Daniel Stenberg (29 Sep 2008)
 | 
						||
- Daniel Egger provided a patch that allows you to disable proxy support in
 | 
						||
  libcurl to somewhat reduce the size of the binary. Run configure
 | 
						||
  --disable-proxy.
 | 
						||
  
 | 
						||
Daniel Fandrich (29 Sep 2008)
 | 
						||
- Moved all signal-based name resolution timeout handling into a single new
 | 
						||
  Curl_resolv_timeout function to reduce coupling.
 | 
						||
 | 
						||
Daniel Stenberg (29 Sep 2008)
 | 
						||
- Ian Lynagh provided a patch that now makes CURLOPT_RANGE work fine for SFTP
 | 
						||
  downloads!
 | 
						||
 | 
						||
- Maxim Ivanov filed bug report #2107803
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2107803) "no CURLINFO_REDIRECT_URL in
 | 
						||
  multi mode" together with a patch that fixed the problem.
 | 
						||
  
 | 
						||
Daniel Stenberg (25 Sep 2008)
 | 
						||
- Emanuele Bovisio submitted bug report #2126435. We fixed the HTTP Digest
 | 
						||
  auth code to not behave badly when getting a blank realm with
 | 
						||
  realm="". http://curl.haxx.se/bug/view.cgi?id=2126435
 | 
						||
 | 
						||
Daniel Fandrich (23 Sep 2008)
 | 
						||
- Make sure not to dereference the wrong UrlState proto union member when
 | 
						||
  switching from one protocol to another in a single request (e.g.
 | 
						||
  redirecting from HTTP to FTP as in test 1055) by resetting
 | 
						||
  state.expect100header before every request.
 | 
						||
 | 
						||
Daniel Stenberg (23 Sep 2008)
 | 
						||
- Introducing Jamie Lokier's function for date to epoch conversion used in the
 | 
						||
  date parser function. This makes our function less dependent on system-
 | 
						||
  provided functions and instead we do all the magic ourselves. We also no
 | 
						||
  longer depend on the TZ environment variable. Switching to our own converter
 | 
						||
  has some side-effect and they are noted here for future reference (taken
 | 
						||
  from a mail by mr Lokier):
 | 
						||
 | 
						||
  time_t is not measured in seconds in the ANSI C standard - or even counted
 | 
						||
  uniformly - weird platforms can use other numeric representations of dates
 | 
						||
  in time_t - hence the difftime() function.
 | 
						||
 | 
						||
  On POSIX time_t is measured in UTC seconds, which means not including leap
 | 
						||
  seconds.  But it's mentioned in a few places that some old POSIX-ish
 | 
						||
  environments include leap seconds in their time_t counts...
 | 
						||
 | 
						||
  I'm pretty sure [the new implementation is] correct on anything truly POSIX.
 | 
						||
  And it's obviously a lot less dependent on platform quirks and corner cases
 | 
						||
  in many ways than the mktime() version.
 | 
						||
 | 
						||
- Rob Crittenden brought a patch to "add some locking for thread-safety to NSS
 | 
						||
  implementation".
 | 
						||
 | 
						||
Daniel Stenberg (22 Sep 2008)
 | 
						||
- Made the SOCKS code use the new Curl_read_plain() function to fix the bug
 | 
						||
  Markus Moeller reported: http://curl.haxx.se/mail/archive-2008-09/0016.html
 | 
						||
 | 
						||
- recv() errors other than those equal to EAGAIN now cause proper
 | 
						||
  CURLE_RECV_ERROR to get returned. This made test case 160 fail so I've now
 | 
						||
  disabled it until we can figure out another way to exercise that logic.
 | 
						||
 | 
						||
- Michael Goffioul filed bug report #2107377 "Problem with multi + GnuTLS +
 | 
						||
  proxy" (http://curl.haxx.se/bug/view.cgi?id=2107377) that showed how a multi
 | 
						||
  interface using program didn't work when built with GnuTLS and a CONNECT
 | 
						||
  request was done over a proxy (basically test 502 over a proxy to a HTTPS
 | 
						||
  site). It turned out the ssl connect function would get called twice which
 | 
						||
  caused the second call to fail.
 | 
						||
 | 
						||
Daniel Fandrich (22 Sep 2008)
 | 
						||
- Fixed test 539 to handle an out of memory condition that shows up now
 | 
						||
  that memdebug.h is included in the test programs.
 | 
						||
 | 
						||
Yang Tse (20 Sep 2008)
 | 
						||
- Fix regression in configure script which affected OpenSSL builds on MSYS.
 | 
						||
 | 
						||
Yang Tse (19 Sep 2008)
 | 
						||
- configure script now checks availability of the alarm() function.
 | 
						||
 | 
						||
Daniel Fandrich (18 Sep 2008)
 | 
						||
- Don't bother to install a SIGALRM handler unless alarm() is available.
 | 
						||
  Also, leave the existing SIGALRM handler alone if the timeout is too small
 | 
						||
  to handle.
 | 
						||
 | 
						||
Daniel Fandrich (17 Sep 2008)
 | 
						||
- Removed reference to curl-ca-bundle.crt in the host verification failure
 | 
						||
  error message.
 | 
						||
 | 
						||
Yang Tse (17 Sep 2008)
 | 
						||
- Improve configure detection of gethostname(), localtime_r(), strstr(),
 | 
						||
  getservbyport_r(), gethostbyaddr_r() and gethostbyname_r().
 | 
						||
 | 
						||
Yang Tse (14 Sep 2008)
 | 
						||
- Improve configure detection of strcasecmp(), strcasestr(), strcmpi(),
 | 
						||
  stricmp(), strlcat(), strncasecmp(), strncmpi() and strnicmp().
 | 
						||
 | 
						||
Yang Tse (13 Sep 2008)
 | 
						||
- Disable tracking of fdopen() calls in the low-level memory leak tracking
 | 
						||
  code when fdopen() is not available, to avoid compiler error.
 | 
						||
 | 
						||
Yang Tse (12 Sep 2008)
 | 
						||
- Further adjust detection of strerror_r() in the configure process, and
 | 
						||
  ensure that errno is not modified inside Curl_strerror().
 | 
						||
 | 
						||
Yang Tse (10 Sep 2008)
 | 
						||
- Improve detection of gmtime_r(), strtoll(), sigaction(), strtok_r(),
 | 
						||
  strdup() and ftruncate() in the configure process.
 | 
						||
 | 
						||
Daniel Fandrich (9 Sep 2008)
 | 
						||
- Mike Revi discovered some swapped speed switches documented in the curl man
 | 
						||
  page.
 | 
						||
 | 
						||
- Checked in some documentation and code improvements and fixes that I
 | 
						||
  discovered in the FreeBSD ports system.
 | 
						||
 | 
						||
Daniel Stenberg (8 Sep 2008)
 | 
						||
- Dmitry Kurochkin patched a problem: I have found bug in pipelining through
 | 
						||
  proxy. I have a transparent proxy. When running with http_proxy environment
 | 
						||
  variable not set my test completes fine (it goes through transparent
 | 
						||
  proxy). When I set http_proxy variable my test hangs after the first
 | 
						||
  downloaded is complete. Looks like the second handle never gets out from
 | 
						||
  WAITDO state.
 | 
						||
 | 
						||
  The fix: It makes checkPendPipeline move 1 handler from pend pipe to send
 | 
						||
  pipe if pipelining is not supported by server but there are no handles in
 | 
						||
  send and recv pipes.
 | 
						||
 | 
						||
- Stefan Krause pointed out that libcurl would wrongly send away cookies to
 | 
						||
  sites in cases where the cookie clearly has a very old expiry date. The
 | 
						||
  condition was simply that libcurl's date parser would fail to convert the
 | 
						||
  date and it would then count as a (timed-based) match. Starting now, a
 | 
						||
  missed date due to an unsupported date format or date range will now cause
 | 
						||
  the cookie to not match.
 | 
						||
 | 
						||
Daniel Fandrich (5 Sep 2008)
 | 
						||
- Improved the logic that decides whether to use HTTP 1.1 features or not in a
 | 
						||
  request.  Setting a specific version with CURLOPT_HTTP_VERSION overrides
 | 
						||
  all other checks, but otherwise, a 1.0 request will be made if the server
 | 
						||
  is known to support only 1.0 because it previously responded so and the
 | 
						||
  connection was kept alive, or a response to a previous request on this handle
 | 
						||
  came back as 1.0. The latter could take place in cases like redirection or
 | 
						||
  authentication where several requests have to be made before the operation
 | 
						||
  is complete.  If any one of the servers in a redirection chain supports only
 | 
						||
  1.0, then remaining requests will be sent in 1.0 mode.
 | 
						||
 | 
						||
- Detect cases where an upload must be sent chunked and the server supports
 | 
						||
  only HTTP 1.0 and return CURLE_UPLOAD_FAILED.
 | 
						||
 | 
						||
Daniel Stenberg (5 Sep 2008)
 | 
						||
- Martin Drasar provided the CURLOPT_POSTREDIR patch. It renames
 | 
						||
  CURLOPT_POST301 (but adds a define for backwards compatibility for you who
 | 
						||
  don't define CURL_NO_OLDIES). This option allows you to now also change the
 | 
						||
  libcurl behavior for a HTTP response 302 after a POST to not use GET in the
 | 
						||
  subsequent request (when CURLOPT_FOLLOWLOCATION is enabled). I edited the
 | 
						||
  patch somewhat before commit. The curl tool got a matching --post302
 | 
						||
  option. Test case 1076 was added to verify this.
 | 
						||
 | 
						||
- Introducing CURLOPT_CERTINFO and the corresponding CURLINFO_CERTINFO. By
 | 
						||
  enabling this feature with CURLOPT_CERTINFO for a request using SSL (HTTPS
 | 
						||
  or FTPS), libcurl will gather lots of server certificate info and that info
 | 
						||
  can then get extracted by a client after the request has completed with
 | 
						||
  curl_easy_getinfo()'s CURLINFO_CERTINFO option. Linus Nielsen Feltzing
 | 
						||
  helped me test and smoothen out this feature.
 | 
						||
 | 
						||
  Unfortunately, this feature currently only works with libcurl built to use
 | 
						||
  OpenSSL.
 | 
						||
 | 
						||
  This feature was sponsored by networking4all.com - thanks!
 | 
						||
 | 
						||
- Dmitriy Sergeyev pointed out that curl_easy_pause() didn't unpause properly
 | 
						||
  during certain conditions. I also changed this code to use realloc() based
 | 
						||
  on Daniel Fandrich's suggestion.
 | 
						||
 | 
						||
Guenter Knauf (4 Sep 2008)
 | 
						||
- MingW32 non-configure builds are now largefile feature enabled by default.
 | 
						||
  NetWare LIBC builds are also now largefile feature enabled by default.
 | 
						||
 | 
						||
Yang Tse (4 Sep 2008)
 | 
						||
- Several fixes related with print formatting string directives.
 | 
						||
 | 
						||
Daniel Fandrich (3 Sep 2008)
 | 
						||
- Search for the FreeBSD CA cert file /usr/local/share/certs/ca-root.crt
 | 
						||
 | 
						||
Daniel Fandrich (2 Sep 2008)
 | 
						||
- Fixed an out of memory problem that caused torture test failures in tests
 | 
						||
  706 and 707.
 | 
						||
 | 
						||
Daniel Stenberg (2 Sep 2008)
 | 
						||
- Keith Mok added supported_protocols and supported_features to the pkg-config
 | 
						||
  file for libcurl, and while doing that fix he unified with curl-config.in
 | 
						||
  how the supported protocols and features are extracted and used, so both those
 | 
						||
  tools should now always be synced.
 | 
						||
 | 
						||
Version 7.19.0 (1 September 2008)
 | 
						||
 | 
						||
Daniel Fandrich (29 Aug 2008)
 | 
						||
- Added tests 1071 through 1074 to test automatic downgrading from HTTP 1.1
 | 
						||
  to HTTP 1.0 upon receiving a response from the HTTP server.  Tests 1072
 | 
						||
  and 1073 are similar to test 1069 in that they involve the impossible
 | 
						||
  scenario of sending chunked data to a HTTP 1.0 server.  All these fail
 | 
						||
  and are added to DISABLED.
 | 
						||
 | 
						||
- Added test 1075 to test --anyauth with Basic authentication.
 | 
						||
 | 
						||
Daniel Stenberg (29 Aug 2008)
 | 
						||
- When libcurl was doing a HTTP POST and the server would respond with
 | 
						||
  "Connection: close" and actually close the connection after the
 | 
						||
  response-body, libcurl could still have outstanding data to send and it
 | 
						||
  would not properly notice this and stop sending. This caused weirdness and
 | 
						||
  sad faces. http://curl.haxx.se/bug/view.cgi?id=2080222
 | 
						||
 | 
						||
  Note that there are still reasons to consider libcurl's behavior when
 | 
						||
  getting a >= 400 response code while sending data, as Craig Perras' note
 | 
						||
  "http upload: how to stop on error" specifies:
 | 
						||
  http://curl.haxx.se/mail/archive-2008-08/0138.html
 | 
						||
 | 
						||
Daniel Stenberg (28 Aug 2008)
 | 
						||
- Dengminwen reported that libcurl would lock a (cookie) share twice (without
 | 
						||
  an unlock in between) for a certain case and that in fact works when using
 | 
						||
  regular windows mutexes but not with pthreads'! Locks should of course not
 | 
						||
  get locked again so this is now fixed.
 | 
						||
  http://curl.haxx.se/mail/lib-2008-08/0422.html
 | 
						||
 | 
						||
- I'm abandoning the system with the web site mirrors (but keeping download
 | 
						||
  files bing mirrored) and thus I've changed the URL in the cookiejar header
 | 
						||
  to no longer use curlm.haxx.se but instead use the main site curl.haxx.se
 | 
						||
 | 
						||
Daniel Fandrich (27 Aug 2008)
 | 
						||
- Fixed test case 1065 by changing the handling of CURLOPT_UPLOAD to set
 | 
						||
  the HTTP method to GET (or HEAD) when given a value of 0.
 | 
						||
 | 
						||
- Added test cases 1068 and 1069 to test a simple HTTP PUT from stdin.  Test
 | 
						||
  case 1069 fails in a similar manner to test 1065 so is added to DISABLED.
 | 
						||
 | 
						||
Yang Tse (27 Aug 2008)
 | 
						||
- Fix generation of MS VC6 .dsp file to make it support compilation of either
 | 
						||
  dynamic (DLL) or static (LIB) libcurl libraries in debug and release modes.
 | 
						||
 | 
						||
Daniel Fandrich (26 Aug 2008)
 | 
						||
- Fixed out of memory problems that caused torture test failures in tests
 | 
						||
  1021 and 1067.
 | 
						||
 | 
						||
Yang Tse (26 Aug 2008)
 | 
						||
- Added check and symbol definition for WIN32 file API usage in configure,
 | 
						||
  supporting configure's --disable-largefile option for WIN32 targets also.
 | 
						||
 | 
						||
- Non-configure systems which do not use config-win32.h configuration file,
 | 
						||
  and want to use the WIN32 file API, must define USE_WIN32_LARGE_FILES or
 | 
						||
  USE_WIN32_SMALL_FILES as appropriate in their own configuration files.
 | 
						||
 | 
						||
Daniel Stenberg (23 Aug 2008)
 | 
						||
- Running 'make ca-firefox' in the root build dir will now run the new
 | 
						||
  firefox-db2pem.sh conversion script that converts a local Firefox db of ca
 | 
						||
  certs into PEM format, suitable for use with a OpenSSL or GnuTLS built
 | 
						||
  libcurl.
 | 
						||
 | 
						||
- Constantine Sapuntzakis fixed a bug when doing proxy CONNECT with the multi
 | 
						||
  interface, and the proxy would send Connection: close during the
 | 
						||
  authentication phase.  http://curl.haxx.se/bug/view.cgi?id=2069047
 | 
						||
 | 
						||
Daniel Fandrich (22 Aug 2008)
 | 
						||
- Fixed a problem when --dump-header - was given with more than one URL,
 | 
						||
  which caused an error when the second header was dumped due to stdout
 | 
						||
  being closed.  Added test case 1066 to verify.  Also fixed a potential
 | 
						||
  problem where a closed file descriptor might be used for an upload
 | 
						||
  when more than one URL is given.
 | 
						||
 | 
						||
Yang Tse (22 Aug 2008)
 | 
						||
- Improved libcurl's internal curl_m*printf() functions integral data type
 | 
						||
  size and signedness handling.
 | 
						||
 | 
						||
- Internal adjustments to better select/differentiate when large/small file
 | 
						||
  support is provided using WIN32 functions directly.
 | 
						||
 | 
						||
Daniel Fandrich (20 Aug 2008)
 | 
						||
- Added an edited version of Vincent Le Normand's documentation of SFTP quote
 | 
						||
  commands to the man pages.
 | 
						||
 | 
						||
Daniel Stenberg (20 Aug 2008)
 | 
						||
- Phil Pellouchoud pointed out that the windows version of libcurl had a
 | 
						||
  memory leak because it never called the OpenSSL function
 | 
						||
  CRYPTO_cleanup_all_ex_data() as it was supposed to. This was because of a
 | 
						||
  missing define in config-win32.h!
 | 
						||
 | 
						||
Gisle Vanem (18 Aug 2008)
 | 
						||
- Updated lib/Makefile.Watcom with the option to use c-ares (USE_ARES=1).
 | 
						||
 | 
						||
Yang Tse (18 Aug 2008)
 | 
						||
- Added test case 557 to verify libcurl's internal curl_m*printf() functions
 | 
						||
  formatting functionality when handling signed and unsigned longs, as well as
 | 
						||
  our curl_off_t data type.
 | 
						||
 | 
						||
Yang Tse (17 Aug 2008)
 | 
						||
- OpenSSl enabled NetWare builds are changed to use the 'openssl' subdirectory
 | 
						||
  when including the OpenSSL header files. This is the recommended setting, this
 | 
						||
  prevents the undesired inclusion of header files with the same name as those
 | 
						||
  of OpenSSL but which do not belong to the OpenSSL package. The visible change
 | 
						||
  from previously released libcurl versions is that now OpenSSl enabled NetWare
 | 
						||
  builds also define USE_OPENSSL in config files, and that OpenSSL header files
 | 
						||
  must be located in a subdirectory named 'openssl'.
 | 
						||
 | 
						||
Yang Tse (16 Aug 2008)
 | 
						||
- Library internal only C preprocessor macros FORMAT_OFF_T and FORMAT_OFF_TU
 | 
						||
  remain in use as internal curl_off_t print formatting strings for the internal
 | 
						||
  *printf functions which still cannot handle print formatting string directives
 | 
						||
  such as "I64d", "I64u", and others available on MSVC, MinGW, Intel's ICC, and
 | 
						||
  other DOS/Windows compilers.
 | 
						||
 | 
						||
Daniel Fandrich (15 Aug 2008)
 | 
						||
- Added test case 1063 to test invalid long file ranges with file: URLs and
 | 
						||
  1064 to test multiple http PUTs.
 | 
						||
 | 
						||
- Added test case 1065 to test a PUT with a single file but two URLs. This
 | 
						||
  was discovered to be problematic while investigating an incident reported by
 | 
						||
  Von back in May.  curl in this case doesn't include a Content-Length: or
 | 
						||
  Transfer-Encoding: chunked header which is illegal. This test case is
 | 
						||
  added to DISABLED until a solution is found.
 | 
						||
 | 
						||
Yang Tse (15 Aug 2008)
 | 
						||
- C preprocessor macros used internally and equally available externally which
 | 
						||
  aid in the use of the curl_off_t data type are named: CURL_FORMAT_CURL_OFF_T,
 | 
						||
  CURL_FORMAT_CURL_OFF_TU, CURL_SIZEOF_CURL_OFF_T, CURL_SUFFIX_CURL_OFF_T,
 | 
						||
  CURL_SUFFIX_CURL_OFF_TU, CURL_OFF_T_C and CURL_OFF_TU_C.
 | 
						||
 | 
						||
Yang Tse (13 Aug 2008)
 | 
						||
- The size of long is a build time characteristic and as such it is now recorded
 | 
						||
  in curlbuild.h as CURL_SIZEOF_LONG. Definition now done from configure process
 | 
						||
  and in CVS curlbuild.h.dist for non-configure systems.
 | 
						||
 | 
						||
Daniel Fandrich (12 Aug 2008)
 | 
						||
- Fixed a buffer overflow problem in Curl_proxyCONNECT that could occur
 | 
						||
  when a server responded with long headers and data.  Luckily, the buffer
 | 
						||
  overflowed into another unused buffer, so no actual harm was done.
 | 
						||
  Added test cases 1060 and 1061 to verify.
 | 
						||
 | 
						||
Daniel Stenberg (12 Aug 2008)
 | 
						||
- Andy Tsouladze fixed runtests.pl to not attempt to execute the stunnel
 | 
						||
  _directory_ if that happened to appear in the path!
 | 
						||
 | 
						||
Yang Tse (12 Aug 2008)
 | 
						||
- Added macros for minimum-width signed and unsigned curl_off_t integer
 | 
						||
  constants CURL_OFF_T_C and CURL_OFF_TU_C. The clever double helper macro
 | 
						||
  used internally to provide its functionality is thanks to Lars Nilsson.
 | 
						||
 | 
						||
Daniel Fandrich (11 Aug 2008)
 | 
						||
- Fixed a boundary condition error in ftp_readresp() whereby a non-terminal
 | 
						||
  line of a multiline FTP response whose last byte landed exactly at the end
 | 
						||
  of the BUFSIZE-length buffer would be treated as the terminal response
 | 
						||
  line.  The following response code read in would then actually be the
 | 
						||
  end of the previous response line, and all responses from then on would
 | 
						||
  correspond to the wrong command. Test case 1062 verifies this.
 | 
						||
 | 
						||
- Stop closing a never-opened ftp socket.
 | 
						||
 | 
						||
Daniel Stenberg (11 Aug 2008)
 | 
						||
- Constantine Sapuntzakis filed bug report #2042430
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2042430) with a patch. "NTLM Windows
 | 
						||
  SSPI code is not thread safe". This was due to libcurl using static
 | 
						||
  variables to tell wether to load the necessary SSPI DLL, but now the loading
 | 
						||
  has been moved to the more suitable curl_global_init() call.
 | 
						||
 | 
						||
- Constantine Sapuntzakis filed bug report #2042440
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=2042440) with a patch. He identified a
 | 
						||
  problem when using NTLM over a proxy but the end-point does Basic, and then
 | 
						||
  libcurl would do wrong when the host sent "Connection: close" as the proxy's
 | 
						||
  NTLM state was erroneously cleared.
 | 
						||
 | 
						||
Yang Tse (11 Aug 2008)
 | 
						||
- Added missing signed and unsigned curl_off_t integer constant suffixes for
 | 
						||
  internal and external use. CURL_SUFFIX_CURL_OFF_T, CURL_SUFFIX_CURL_OFF_TU.
 | 
						||
 | 
						||
Daniel Fandrich (7 Aug 2008)
 | 
						||
- Fixed an uninitialized variable in multi_runsingle() that could cause a
 | 
						||
  request to prematurely end.
 | 
						||
 | 
						||
- Added test1059 to test the FTP proxy tunnel problem fixed July 11.
 | 
						||
 | 
						||
Yang Tse (7 Aug 2008)
 | 
						||
- Added curlbuild.h and curlrules.h header files to libcurl's public headers.
 | 
						||
  File curlbuild.h is a generated file on configure-capable systems. This is
 | 
						||
  a first step towards configure-based info in public headers. Currently only
 | 
						||
  used to provide support for a curl_off_t data type which is not gated to
 | 
						||
  off_t. Further details are documented inside these mentioned header files.
 | 
						||
 | 
						||
- Fix CURL_CHECK_DEF so that when the expansion of the preprocessor symbol
 | 
						||
  results in a set of double-quoted strings, this macro will now return an
 | 
						||
  expansion which consists of a single double-quoted string as the result of
 | 
						||
  concatenating all of them.
 | 
						||
 | 
						||
- Skip data type check in DO_CURL_OFF_T_CHECK macro when argument is empty.
 | 
						||
 | 
						||
- Adjusted testcurl.pl to copy checked out curlbuild.h.dist as curlbuild.h
 | 
						||
  for non-configure targets when the host system doesn't run buildconf.bat.
 | 
						||
 | 
						||
- Prevent buildconf from removing 'Makefile' and 'missing' files. This would
 | 
						||
  blow away our CVS checked files 'missing' and 'hiper/Makefile'.
 | 
						||
 | 
						||
- Remove adjustment done to testcurl.pl to verify if change introduced by
 | 
						||
  Guenter Knauf in lib/Makefile.netware is enough to get the netware autobuilds
 | 
						||
  going again.
 | 
						||
 | 
						||
Yang Tse (5 Aug 2008)
 | 
						||
- Changes done to buildconf script. Validate that autom4te and autoconf, as
 | 
						||
  well as aclocal and automake, versions match. Improve removal of previous
 | 
						||
  run generated files. Remove verbose debug logging of aclocal on Solaris.
 | 
						||
 | 
						||
Daniel Stenberg (5 Aug 2008)
 | 
						||
- Yehoshua Hershberg found a problem that would make libcurl re-use a
 | 
						||
  connection with the multi interface even if a previous use of it caused a
 | 
						||
  CURLE_PEER_FAILED_VERIFICATION to get returned. I now make sure that failed
 | 
						||
  SSL connections properly close the connections.
 | 
						||
 | 
						||
Daniel Stenberg (4 Aug 2008)
 | 
						||
- Test cases 1051, 1052 and 1055 were added by Daniel Fandrich on July 30 and
 | 
						||
  proved how PUT and POST with a redirect could lead to a "hang" due to the
 | 
						||
  data stream not being rewound properly when it had to in order to get sent
 | 
						||
  properly (again) to the subsequent URL. This is now fixed and these test
 | 
						||
  cases are no longer disabled.
 | 
						||
 | 
						||
Yang Tse (4 Aug 2008)
 | 
						||
- Autoconf 2.62 has changed the behaviour of the AC_AIX macro which we use.
 | 
						||
  Prior versions of autoconf defined _ALL_SOURCE if _AIX was defined. 2.62
 | 
						||
  version of AC_AIX defines _ALL_SOURCE and other four preprocessor symbols
 | 
						||
  no matter if the system is AIX or not. To keep the traditional behaviour,
 | 
						||
  and an uniform one across autoconf versions AC_AIX is replaced with our
 | 
						||
  own internal macro CURL_CHECK_AIX_ALL_SOURCE.
 | 
						||
 | 
						||
Daniel Stenberg (4 Aug 2008)
 | 
						||
- Test case 1041 (added by Daniel Fandrich July 14th) proved a bug where PUT
 | 
						||
  with -C - sent garbage in the Content-Range: header. I fixed this problem by
 | 
						||
  making sure libcurl always sets the size of the _entire_ upload if an app
 | 
						||
  attemps to do resumed uploads since libcurl simply cannot know the size of
 | 
						||
  what is currently at the server end. Test 1041 is no longer disabled.
 | 
						||
 | 
						||
Yang Tse (2 Aug 2008)
 | 
						||
- No longer test availability of the gdi32 library, nor use it for linking, even
 | 
						||
  when we have been doing this since revision 1.47 of configure.ac 4 years and
 | 
						||
  5 months ago when cross-compiling a Windows target. We actually don't use any
 | 
						||
  function from the Windows GDI (Graphics Device Interface) related with drawing
 | 
						||
  or graphics-related operations.
 | 
						||
 | 
						||
Daniel Fandrich (1 Aug 2008)
 | 
						||
- Added support for --append on SFTP uploads. Unfortunately, OpenSSH doesn't
 | 
						||
  support this so it goes untested.
 | 
						||
 | 
						||
Yang Tse (1 Aug 2008)
 | 
						||
- Configure process now checks if the preprocessor _REENTRANT symbol is already
 | 
						||
  defined. If it isn't currently defined a set of checks are performed to test
 | 
						||
  if its definition is required to make visible to the compiler a set of *_r
 | 
						||
  functions. Finally, if _REENTRANT is already defined or needed it takes care
 | 
						||
  of making adjustments necessary to ensure that it is defined equally for the
 | 
						||
  configure process tests and generated config file.
 | 
						||
 | 
						||
- Removed definition of CURL_CHECK_WORKING_RESOLVER from acinclude.m4 it has
 | 
						||
  not been in use since revision 1.81 of configure.in 6 years, 9 months ago.
 | 
						||
 | 
						||
Daniel Fandrich (31 Jul 2008)
 | 
						||
- Fixed parsing of an IPv6 proxy address to support a scope identifier,
 | 
						||
  as well as IPv4 addresses in IPv6 format. Also, better handle the case
 | 
						||
  of a malformatted IPv6 address (avoid empty and NULL strings).
 | 
						||
 | 
						||
- Fixed a problem with any FTP URL or any URLs containing an IPv6 address
 | 
						||
  being mangled when passed to proxies when CURLOPT_PORT is also set
 | 
						||
  (reported by Pramod Sharma).
 | 
						||
 | 
						||
- User names embedded in proxy URLs without a password were parsed
 | 
						||
  incorrectly--the host name is treated as part of the user name and the
 | 
						||
  port number becomes the password.  This can be observed in test 279
 | 
						||
  (was KNOWN_ISSUE #54).
 | 
						||
 | 
						||
Daniel Stenberg (30 Jul 2008)
 | 
						||
- Phil Blundell added the CURLOPT_ADDRESS_SCOPE option, as well as adjusted
 | 
						||
  the URL parser to allow numerical IPv6-addresses to be specified with the
 | 
						||
  scope given, as per RFC4007 - with a percent letter that itself needs to be
 | 
						||
  URL escaped. For example, for an address of fe80::1234%1 the HTTP URL is:
 | 
						||
  "http://[fe80::1234%251]/"
 | 
						||
 | 
						||
- PHP's bug report #43158 (http://bugs.php.net/bug.php?id=43158) identifies a
 | 
						||
  true bug in libcurl built with OpenSSL. It made curl_easy_getinfo() more or
 | 
						||
  less always return 0 for CURLINFO_SSL_VERIFYRESULT because the function that
 | 
						||
  would set it to something non-zero would return before the assign in almost
 | 
						||
  all error cases. The internal variable is now set to non-zero from the start
 | 
						||
  of the function only to get cleared later on if things work out fine.
 | 
						||
 | 
						||
- Made the curl tool's -w option support the %{ssl_verify_result} variable
 | 
						||
 | 
						||
Daniel Fandrich (30 Jul 2008)
 | 
						||
- Added test cases 1052 through 1055 to test uploading data from files
 | 
						||
  during redirects.  Test cases 1052 and 1055 show problems (maybe the same
 | 
						||
  root cause as 1051) and are disabled.
 | 
						||
 | 
						||
- Fixed a couple of buffer overflows in the MS-DOS port of the curl tool.
 | 
						||
 | 
						||
Daniel Fandrich (29 Jul 2008)
 | 
						||
- Fixed --use-ascii to properly convert text files on Symbian OS, MS-DOS
 | 
						||
  and OS/2.
 | 
						||
 | 
						||
- Added test case 1051 to test Location: following with PUT, as reported
 | 
						||
  by Ben Sutcliffe.  The test when run manually shows a problem in curl
 | 
						||
  so it's disabled.
 | 
						||
 | 
						||
Daniel Fandrich (28 Jul 2008)
 | 
						||
- Fixed display of the interface bind address in the trace output when it's
 | 
						||
  an IPv6 address.
 | 
						||
 | 
						||
- Added test cases 1045 through 1049 as simple tests of --interface using the
 | 
						||
  localhost interface.
 | 
						||
 | 
						||
- Added test case 1050 to test --ftp-port with an IPv6 address
 | 
						||
 | 
						||
Daniel Stenberg (26 Jul 2008)
 | 
						||
- David Bau filed bug report #2026240 "CURL_READFUNC_PAUSE leads to buffer
 | 
						||
  overrun" (http://curl.haxx.se/bug/view.cgi?id=2026240) identifying two
 | 
						||
  problems, and providing the fix for them:
 | 
						||
 | 
						||
  - CURL_READFUNC_PAUSE did in fact not pause the _sending_ of data that it is
 | 
						||
    designed for but paused _receiving_ of data!
 | 
						||
 | 
						||
  - libcurl didn't internally set the read counter to zero when this return
 | 
						||
    code was detected, which would potentially lead to junk getting sent to
 | 
						||
    the server.
 | 
						||
 | 
						||
Daniel Fandrich (26 Jul 2008)
 | 
						||
- Added test 1044 to test large file support in ftp with -I.
 | 
						||
 | 
						||
- Eliminate a unnecessary socket creation in Curl_getaddrinfo for an IPv4
 | 
						||
  address in an IPv6 capable libcurl.
 | 
						||
 | 
						||
- Added feature in runtests.pl to select tests based on key word.
 | 
						||
 | 
						||
Daniel Fandrich (23 Jul 2008)
 | 
						||
- Changed the long logfile elision code in runtests.pl to properly handle
 | 
						||
  lines ending in \r.
 | 
						||
 | 
						||
- Changed references to TRUE and FALSE in the curl_easy_setopt man page to
 | 
						||
  1 and zero, respectively, since TRUE and FALSE aren't part of the
 | 
						||
  libcurl API.
 | 
						||
 | 
						||
Daniel Stenberg (23 Jul 2008)
 | 
						||
- I went over the curl_easy_setopt man page and replaced most references to
 | 
						||
  non-zero with the fixed value of 1. We should strive at making options
 | 
						||
  support '1' for enabling them mentioned explicitly, as that then will allow
 | 
						||
  us for to extend them in the future without breaking older programs.
 | 
						||
 | 
						||
  Possibly we should even introduce a fancy define to use instead of '1' all
 | 
						||
  over...
 | 
						||
 | 
						||
Yang Tse (21 Jul 2008)
 | 
						||
- Use the sreadfrom() wrapper to replace recvfrom() in our code.
 | 
						||
 | 
						||
Yang Tse (20 Jul 2008)
 | 
						||
- when recvfrom prototype uses a void pointer for arguments 2, 5 or 6 this will
 | 
						||
  now cause the definition, as appropriate, of RECVFROM_TYPE_ARG2_IS_VOID,
 | 
						||
  RECVFROM_TYPE_ARG5_IS_VOID or RECVFROM_TYPE_ARG6_IS_VOID.
 | 
						||
 | 
						||
Yang Tse (17 Jul 2008)
 | 
						||
- RECVFROM_TYPE_ARG2, RECVFROM_TYPE_ARG5 and RECVFROM_TYPE_ARG6 are now defined
 | 
						||
  to the data type pointed by its respective argument and not the pointer type.
 | 
						||
 | 
						||
Yang Tse (16 Jul 2008)
 | 
						||
- Configure process now checks availability of recvfrom() socket function and
 | 
						||
  finds out its return type and the types of its arguments. Added definitions
 | 
						||
  for non-configure systems config files, and introduced macro sreadfrom which
 | 
						||
  will be used on udp sockets as a recvfrom() wrapper.
 | 
						||
 | 
						||
Yang Tse (15 Jul 2008)
 | 
						||
- Added description/comment to include paths used in several Makefile.am files.
 | 
						||
  Added automake option nostdinc to test servers makefile and modified libcurl
 | 
						||
  external headers include path for libtest programs.
 | 
						||
 | 
						||
Daniel Fandrich (14 Jul 2008)
 | 
						||
- Added test1040 through test1043 to test -C - on HTTP. Test 1041 failed so
 | 
						||
  it's added to DISABLED.
 | 
						||
 | 
						||
Yang Tse (14 Jul 2008)
 | 
						||
- HTTP_ONLY definition check in lib/setup.h is now done once that configuration
 | 
						||
  file has been included. In this way if symbol is defined in the config file
 | 
						||
  it will no longer be ignored.  Removed inclusion of remaining system header
 | 
						||
  files from configuration files. Moved _REENTRANT definition up/earlier in
 | 
						||
  lib/setup.h
 | 
						||
 | 
						||
Yang Tse (11 Jul 2008)
 | 
						||
- Added missing multiple header inclusion prevention definition for header
 | 
						||
  file content_encoding.h
 | 
						||
 | 
						||
Daniel Fandrich (11 Jul 2008)
 | 
						||
- Fixed test 553 to pass the torture test.
 | 
						||
 | 
						||
Daniel Stenberg (11 Jul 2008)
 | 
						||
- Daniel Fandrich found out we didn't pass on the user-agent properly when
 | 
						||
  doing "proxy-tunnels" with non-HTTP prototols and that was simply because
 | 
						||
  the code assumed the user-agent was only needed for HTTP.
 | 
						||
 | 
						||
Daniel Fandrich (10 Jul 2008)
 | 
						||
- Changed slightly the SFTP quote commands chmod, chown and chgrp to only
 | 
						||
  set the attribute that has changed instead of all possible ones. Hopefully,
 | 
						||
  this will solve the "Permission denied" problem that Nagarajan Sreenivasan
 | 
						||
  reported when setting some modes, but regardless, it saves a protocol
 | 
						||
  round trip in the chmod case.
 | 
						||
 | 
						||
- Added test cases 1038 and 1039 to test Adrian Kreher's report that ftp
 | 
						||
  uploads with -C - didn't resume properly, but the tests pass.
 | 
						||
 | 
						||
Yang Tse (10 Jul 2008)
 | 
						||
- Peter Lamberg filed bug report #2015126: "poll gives WSAEINVAL when POLLPRI
 | 
						||
  is set in fdset.events" (http://curl.haxx.se/bug/view.cgi?id=2015126) which
 | 
						||
  exactly pinpointed the problem only triggered on Windows Vista, provided
 | 
						||
  reference to docs and also a fix. There is much work behind Peter Lamberg's
 | 
						||
  excellent bug report. Thank You!
 | 
						||
 | 
						||
Daniel Fandrich (9 Jul 2008)
 | 
						||
- Added tests 1036 and 1037 to verify resumed ftp downloads with -C -
 | 
						||
 | 
						||
Daniel Stenberg (9 Jul 2008)
 | 
						||
- Andreas Schuldei improved Phil Blundell's patch for IPv6 using c-ares, and I
 | 
						||
  edited it slightly. Now you should be able to use IPv6 addresses fine even
 | 
						||
  with libcurl built to use c-ares.
 | 
						||
 | 
						||
Daniel Fandrich (9 Jul 2008)
 | 
						||
- Fixed an OOM handling problem that cause test 11 to fail the torture test.
 | 
						||
 | 
						||
Daniel Fandrich (8 Jul 2008)
 | 
						||
- Fixed test 554 to pass the torture test.
 | 
						||
 | 
						||
Daniel Fandrich (7 Jul 2008)
 | 
						||
- Added test cases 1034 & 1035 to test IDN name conversion failures.
 | 
						||
 | 
						||
Daniel Stenberg (7 Jul 2008)
 | 
						||
- Scott Barrett provided a test case for a segfault in the FTP code and the
 | 
						||
  fix for it. It occured when you did a FTP transfer using
 | 
						||
  CURLFTPMETHOD_SINGLECWD and then did another one on the same easy handle but
 | 
						||
  switched to CURLFTPMETHOD_NOCWD. Due to the "dir depth" variable not being
 | 
						||
  cleared properly.  Scott's test case is now known as test 539 and it
 | 
						||
  verifies the fix.
 | 
						||
 | 
						||
Daniel Stenberg (3 Jul 2008)
 | 
						||
- Phil Blundell provided a fix for libcurl's treatment of unexpected 1xx
 | 
						||
  response codes. Previously libcurl would hang on such occurances. I added
 | 
						||
  test case 1033 to verify.
 | 
						||
 | 
						||
- Introcuding a new timestamp for curl_easy_getinfo():
 | 
						||
  CURLINFO_APPCONNECT_TIME. This is set with the "application layer"
 | 
						||
  handshake/connection is completed. Which typically is SSL, TLS or SSH and by
 | 
						||
  using this you can figure out the application layer's own connect time. You
 | 
						||
  can extract the time stamp using curl's -w option and the new variable named
 | 
						||
  'time_appconnect'. This feature was sponsored by Lenny Rachitsky at NeuStar.
 | 
						||
 | 
						||
Daniel Fandrich (2 Jul 2008)
 | 
						||
- Support Open Watcom C on Linux (as well as Windows).
 | 
						||
 | 
						||
Yang Tse (2 Jul 2008)
 | 
						||
- The previously committed fix for bug report #1999181 prevented using the
 | 
						||
  monotonic clock on any system without an always supported POSIX compliant
 | 
						||
  implementation. Now the POSIX compliant configuration check is removed and
 | 
						||
  will fallback to gettimeofday when the monotonic clock is unavailable at
 | 
						||
  run-time.
 | 
						||
 | 
						||
- The configure process will now halt when sed, grep, egrep or ar programs
 | 
						||
  can not be found among the directories in PATH variable.
 | 
						||
 | 
						||
Daniel Stenberg (1 Jul 2008)
 | 
						||
- Rolland Dudemaine provided fixes to get libcurl to build for the INTEGRITY
 | 
						||
  operating system.
 | 
						||
 | 
						||
Daniel Stenberg (30 Jun 2008)
 | 
						||
- Made the internal printf() support %llu properly to print unsigned long longs.
 | 
						||
 | 
						||
- Stephen Collyer and Tor Arntsen helped identify a flaw in the range code
 | 
						||
  which output the range using a signed variable where it should rather use
 | 
						||
  unsigned.
 | 
						||
 | 
						||
Yang Tse (29 Jun 2008)
 | 
						||
- John Lightsey filed bug report #1999181: "CLOCK_MONOTONIC always fails on
 | 
						||
  some systems" (http://curl.haxx.se/bug/view.cgi?id=1999181). The problem was
 | 
						||
  that the configure script did not use the _POSIX_MONOTONIC_CLOCK feature test
 | 
						||
  macro when checking monotonic clock availability. This is now fixed and the
 | 
						||
  monotonic clock will not be used unless the feature test macro is defined
 | 
						||
  with a value greater than zero indicating always supported.
 | 
						||
 | 
						||
Daniel Fandrich (25 Jun 2008)
 | 
						||
- Honour --stderr with the -v option.
 | 
						||
 | 
						||
- Fixed a file handle leak in the command line client if more than one
 | 
						||
  --stderr option was given.
 | 
						||
 | 
						||
Daniel Stenberg (22 Jun 2008)
 | 
						||
- Eduard Bloch filed the debian bug report #487567
 | 
						||
  (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487567) pointing out that
 | 
						||
  libcurl used Content-Range: instead of Range when doing a range request with
 | 
						||
  --head (CURLOPT_NOBODY). This is now fixed and test case 1032 was added to
 | 
						||
  verify.
 | 
						||
  
 | 
						||
Daniel Fandrich (21 Jun 2008)
 | 
						||
- Stopped using ranges in scanf character sequences (e.g. %[a-z]) since that
 | 
						||
  is not ANSI C, just a common extension.  This caused problems on
 | 
						||
  at least Open Watcom C.
 | 
						||
 | 
						||
Yang Tse (20 Jun 2008)
 | 
						||
- Modified configuration script to actually verify if the compiler is good
 | 
						||
  enough at detecting compilation errors or at least it has been properly
 | 
						||
  configured to do so. Configuration heavily depends on this capability, so
 | 
						||
  if this compiler sanity check fails the configuration process will now fail.
 | 
						||
 | 
						||
Daniel Stenberg (20 Jun 2008)
 | 
						||
- Phil Pellouchoud found a case where libcurl built with NSS failed to
 | 
						||
  handshake with a SSLv2 server, and it turned out to be because it didn't
 | 
						||
  recognize the cipher named "rc4-md5". In our list that cipher was named
 | 
						||
  plainly "rc4". I've now added rc4-md5 to work as an alias as Phil reported
 | 
						||
  that it made things work for him again.
 | 
						||
 | 
						||
- Hans-Jurgen May pointed out that trying SCP or SFTP over a SOCKS proxy
 | 
						||
  crashed libcurl. This is now addressed by making sure we use "plain send"
 | 
						||
  internally when doing the socks handshake instead of the Curl_write()
 | 
						||
  function which is designed to use the "target" protocol. That's then SCP or
 | 
						||
  SFTP in this case. I also took the opportunity and cleaned up some ssh-
 | 
						||
  related #ifdefs in the code for readability.
 | 
						||
 | 
						||
Daniel Stenberg (19 Jun 2008)
 | 
						||
- Christopher Palow fixed a curl_multi_socket() issue which previously caused
 | 
						||
  libcurl to not tell the app properly when a socket was closed (when the name
 | 
						||
  resolve done by c-ares is completed) and then immediately re-created and put
 | 
						||
  to use again (for the actual connection). Since the closure will make the
 | 
						||
  "watch status" get lost in several event-based systems libcurl will need to
 | 
						||
  tell the app about this close/re-create case.
 | 
						||
 | 
						||
- Dengminwen found a bug in the connection re-use function when using the
 | 
						||
  multi interface with pipelining enabled as it would wrongly check for,
 | 
						||
  detect and close "dead connections" even though that connection was already
 | 
						||
  in use!
 | 
						||
 | 
						||
Daniel Fandrich (18 Jun 2008)
 | 
						||
- Added SSH failure test cases 628-632
 | 
						||
 | 
						||
- Fixed a memory leak in the command-line tool that caused a valgrind error.
 | 
						||
 | 
						||
Daniel Stenberg (18 Jun 2008)
 | 
						||
- Rob Crittenden brought a fix for the NSS layer that makes libcurl no longer
 | 
						||
  always fire up a new connection rather than using the existing one when the
 | 
						||
  multi interface is used. Original bug report:
 | 
						||
  https://bugzilla.redhat.com/show_bug.cgi?id=450140
 | 
						||
 | 
						||
Yang Tse (18 Jun 2008)
 | 
						||
- Internal configure script improvement. No longer break out of shell "for"
 | 
						||
  statements from inside AC_FOO_IFELSE macros, otherwise temporary macro files
 | 
						||
  are not properly removed.
 | 
						||
 | 
						||
Daniel Fandrich (12 Jun 2008)
 | 
						||
- Fixed curl-config --ca which wasn't being exported by configure.
 | 
						||
 | 
						||
Daniel Stenberg (11 Jun 2008)
 | 
						||
- I did a cleanup of the internal generic SSL layer and how the various SSL
 | 
						||
  libraries are supported. Starting now, each underlying SSL library support
 | 
						||
  code does a set of defines for the 16 functions the generic layer (sslgen.c)
 | 
						||
  uses (all these new function defines use the prefix "curlssl_"). This
 | 
						||
  greatly simplified the generic layer in readability by involving much less
 | 
						||
  #ifdefs and other preprocessor stuff and should make it easier for people to
 | 
						||
  make libcurl work with new SSL libraries.
 | 
						||
 | 
						||
  Hopefully I can later on document these 16 functions somewhat as well.
 | 
						||
 | 
						||
  I also made most of the internal SSL-dependent functions (using Curl_ssl_
 | 
						||
  prefix) #defined to nothing when no SSL support is requested - previously
 | 
						||
  they would unnecessarily call mostly empty functions.
 | 
						||
 | 
						||
  I've built libcurl with OpenSSL and GnuTLS and without SSL to test this and
 | 
						||
  I've also tried building with NSS but the NSS support is a mystery to me and
 | 
						||
  I failed to build libcurl with the NSS libraries I have installed. We really
 | 
						||
  should A) improve our configure script to detect unsuitable NSS versions
 | 
						||
  already at configure time and B) document our requirements better for the
 | 
						||
  SSL libraries.
 | 
						||
 | 
						||
Daniel Stenberg (10 Jun 2008)
 | 
						||
- I made the OpenSSL code build again with OpenSSL 0.9.6. The CRLFILE
 | 
						||
  functionality killed it due to its unconditional use of
 | 
						||
  X509_STORE_set_flags...
 | 
						||
 | 
						||
Daniel Stenberg (8 Jun 2008)
 | 
						||
- Due to the three new libcurl changes and the massive command line option
 | 
						||
  change I decided we'll mark it by bumping the next release number to 7.19.0!
 | 
						||
 | 
						||
- curl the tool now deals with its command line options somewhat differently!
 | 
						||
  All boolean options (such as -O, -I, -v etc), both short and long versions,
 | 
						||
  now always switch on/enable the option named. Using the same option multiple
 | 
						||
  times thus make no difference. To switch off one of those options, you need
 | 
						||
  to use the long version of the option and type --no-OPTION. Like to disable
 | 
						||
  verbose mode you use --no-verbose!
 | 
						||
 | 
						||
- Added --remote-name-all to curl, which if used changes the default for all
 | 
						||
  given URLs to be dealt with as if -O is used. So if you want to disable that
 | 
						||
  for a specific URL after --remote-name-all has been used, you muse use -o -
 | 
						||
  or --no-remote-name.
 | 
						||
 | 
						||
Daniel Stenberg (6 Jun 2008)
 | 
						||
- Axel Tillequin and Arnaud Ebalard added support for CURLOPT_ISSUERCERT, for
 | 
						||
  OpenSSL, NSS and GnuTLS-built libcurls.
 | 
						||
 | 
						||
- Axel Tillequin and Arnaud Ebalard added support for CURLOPT_CRLFILE, for
 | 
						||
  OpenSSL, NSS and GnuTLS-built libcurls.
 | 
						||
 | 
						||
- Added CURLINFO_PRIMARY_IP as a new information retrievable with
 | 
						||
  curl_easy_getinfo. It returns a pointer to a string with the most recently
 | 
						||
  used IP address. Modified test case 500 to also verify this feature. The
 | 
						||
  implementing of this feature was sponsored by Lenny Rachitsky at NeuStar.
 | 
						||
 | 
						||
Version 7.18.2 (4 June 2008)
 | 
						||
 | 
						||
Daniel Fandrich (3 Jun 2008)
 | 
						||
- Fixed a problem where telnet data would be lost if an EWOULDBLOCK
 | 
						||
  condition were encountered.
 | 
						||
 | 
						||
Marty Kuhrt (1 Jun 2008)
 | 
						||
- Updated main.c to return CURLE_OK if PARAM_HELP_REQUESTED was returned
 | 
						||
  from getparameter instead of CURLE_FAILED_INIT.  No point in returning
 | 
						||
  an error if --help or --version were requested.
 | 
						||
 | 
						||
Daniel Stenberg (28 May 2008)
 | 
						||
- Emil Romanus found a problem and helped me repeat it. It occured when using
 | 
						||
  the curl_multi_socket() API with HTTP pipelining enabled and could lead to
 | 
						||
  the pipeline basically stalling for a very long period of time until it took
 | 
						||
  off again.
 | 
						||
 | 
						||
- Jeff Weber reported memory leaks with aborted SCP and SFTP transfers and
 | 
						||
  provided excellent repeat recipes. I fixed the cases I managed to reproduce
 | 
						||
  but Jeff still got some (SCP) problems even after these fixes:
 | 
						||
  http://curl.haxx.se/mail/lib-2008-05/0342.html
 | 
						||
 | 
						||
Daniel Stenberg (26 May 2008)
 | 
						||
- Bug report #1973352 (http://curl.haxx.se/bug/view.cgi?id=1973352) identified
 | 
						||
  how the HTTP redirect following code didn't properly follow to a new URL if
 | 
						||
  the new url was but a query string such as "Location: ?moo=foo". Test case
 | 
						||
  1031 was added to verify this fix.
 | 
						||
 | 
						||
- Andreas Faerber and Scott McCreary made (lib)curl build for the Haiku OS. 
 | 
						||
 | 
						||
Yang Tse (26 May 2008)
 | 
						||
- David Rosenstrauch reported that header files spnegohelp.h and
 | 
						||
  openssl/objects.h were needed to compile SPNEGO support.
 | 
						||
 | 
						||
Daniel Fandrich (22 May 2008)
 | 
						||
- Made sure to pass longs in to curl_easy_setopt where necessary in the
 | 
						||
  example programs and libtest code.
 | 
						||
 | 
						||
Daniel Stenberg (19 May 2008)
 | 
						||
- When trying to repeat a multi interface problem I fell over a few multi
 | 
						||
  interface problems:
 | 
						||
 | 
						||
  o with pipelining disabled, the state should never be set to WAITDO but
 | 
						||
    rather go straight to DO
 | 
						||
 | 
						||
  o we had multiple states for which the internal function returned no socket
 | 
						||
    at all to wait for, with the effect that libcurl calls the socket callback
 | 
						||
    (when curl_multi_socket() is used) with REMOVE prematurely (as it would be
 | 
						||
    added again within very shortly)
 | 
						||
 | 
						||
  o when in DO and DOING states, the HTTP and HTTPS protocol handler functions
 | 
						||
    didn't return that the socket should be waited for writing, but instead it
 | 
						||
    was treated as if no socket was needing monitoring so again REMOVE was
 | 
						||
    called prematurely.
 | 
						||
 | 
						||
Daniel Stenberg (13 May 2008)
 | 
						||
- Added test case 556 that uses curl_easy_send() and curl_easy_recv()
 | 
						||
 | 
						||
Daniel Stenberg (9 May 2008)
 | 
						||
- Introducing curl_easy_send() and curl_easy_recv(). They can be used to send
 | 
						||
  and receive data over a connection previously setup with curl_easy_perform()
 | 
						||
  and its CURLOPT_CONNECT_ONLY option. The sendrecv.c example was added to
 | 
						||
  show how they can be used.
 | 
						||
 | 
						||
Yang Tse (9 May 2008)
 | 
						||
- Internal time differences now use monotonic time source if available.
 | 
						||
  This also implies the removal of the winmm.lib dependency for WIN32.
 | 
						||
 | 
						||
Daniel Stenberg (9 May 2008)
 | 
						||
- Stefan Krause reported a busy-looping case when using the multi interface
 | 
						||
  and doing CONNECT to a proxy. The app would then busy-loop until the proxy
 | 
						||
  completed its response.
 | 
						||
 | 
						||
Michal Marek (9 May 2008)
 | 
						||
- Make Curl_write and it's callees accept a const pointer, in preparation
 | 
						||
  of tetetest's patch for curl_easy_send()
 | 
						||
 | 
						||
Daniel Stenberg (7 May 2008)
 | 
						||
- Liam Healy filed the debian bug report #480044
 | 
						||
  (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480044) identifying a
 | 
						||
  segfault when using krb5 ftp, but the krb4 code had the same problem.
 | 
						||
 | 
						||
Yang Tse (7 May 2008)
 | 
						||
- Christopher Palow provided the patch (edited by me) that introduces the
 | 
						||
  use of microsecond resolution keys for internal splay trees.
 | 
						||
 | 
						||
Daniel Stenberg (4 May 2008)
 | 
						||
- Yuriy Sosov pointed out a configure fix for detecting c-ares when that is
 | 
						||
  built debug-enabled.
 | 
						||
 | 
						||
Daniel Stenberg (3 May 2008)
 | 
						||
- Ben Van Hof filed bug report #1945240: "libcurl sometimes sends body twice
 | 
						||
  when using CURL_AUTH_ANY" (http://curl.haxx.se/bug/view.cgi?id=1945240).
 | 
						||
  The problem was that when libcurl rewound a stream meant for upload when it
 | 
						||
  would prepare for a second request, it could accidentally continue the
 | 
						||
  sending of the rewound data on the first request instead of on the second.
 | 
						||
  Ben also provided test case 1030 that verifies this fix.
 | 
						||
 | 
						||
Daniel Stenberg (3 May 2008)
 | 
						||
- Jean-Francois Bertrand reported a libcurl crash with CURLOPT_TCP_NODELAY
 | 
						||
  since libcurl used getprotobyname() and that isn't thread-safe. We now
 | 
						||
  switched to use IPPROTO_TCP unconditionally, but perhaps the proper fix is
 | 
						||
  to detect the thread-safe version of the function and use that.
 | 
						||
  http://curl.haxx.se/mail/lib-2008-05/0011.html
 | 
						||
 | 
						||
Daniel Stenberg (1 May 2008)
 | 
						||
- Bart Whiteley provided a patch that made libcurl work properly when an app
 | 
						||
  uses the CURLOPT_OPENSOCKETFUNCTION callback to create a unix domain socket
 | 
						||
  to a http server.
 | 
						||
 | 
						||
Daniel Stenberg (29 Apr 2008)
 | 
						||
- To make it easier for applications that want lots of magic stuff done on
 | 
						||
  redirections and thus cannot use CURLOPT_FOLLOWLOCATION easily, we now
 | 
						||
  introduce the new CURLINFO_REDIRECT_URL option that lets applications
 | 
						||
  extract the URL libcurl would've redirected to if it had been told to. This
 | 
						||
  then enables the application to continue to that URL as it thinks is
 | 
						||
  suitable, without having to re-implement the magic of creating the new URL
 | 
						||
  from the Location: header etc. Test 1029 verifies it.
 | 
						||
 | 
						||
Yang Tse (29 Apr 2008)
 | 
						||
- Improved easy interface resolving timeout handling in c-ares enabled builds
 | 
						||
 | 
						||
Daniel Fandrich (28 Apr 2008)
 | 
						||
- Added test 1028 to test an HTTP redirect to a FTP URL.
 | 
						||
 | 
						||
Daniel Stenberg (28 Apr 2008)
 | 
						||
- Norbert Frese filed bug report #1951588: "Problem with curlftpfs and
 | 
						||
  libcurl" (http://curl.haxx.se/bug/view.cgi?id=1951588) which seems to be an
 | 
						||
  identical report to what Denis Golovan reported in
 | 
						||
  http://curl.haxx.se/mail/lib-2008-02/0108.html The FTP code didn't reset the
 | 
						||
  user/password pointers properly even though there might've been a new
 | 
						||
  struct/cconnection getting used.
 | 
						||
 | 
						||
Daniel Stenberg (26 Apr 2008)
 | 
						||
- Reverted back to use automake 1.9.6 in the next release (from automake
 | 
						||
  1.10.1) since it *still* suffers from Solaris-related bugs. Our previous
 | 
						||
  automake 1.10 problem was reported in bug #1701360
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1701360) and this recent problem was
 | 
						||
  bug #1944825 (http://curl.haxx.se/bug/view.cgi?id=1944825). I have not
 | 
						||
  personally approached the automake team about either one of these but I
 | 
						||
  figure we need a Solaris 10 guy to do it!
 | 
						||
  
 | 
						||
Yang Tse (25 Apr 2008)
 | 
						||
- Added 'timeout' and 'delay' attributes support for the test harness
 | 
						||
  <command> subsection.
 | 
						||
 | 
						||
Daniel Fandrich (24 Apr 2008)
 | 
						||
- Made --stderr able to redirect all stderr messages.
 | 
						||
 | 
						||
Yang Tse (23 Apr 2008)
 | 
						||
- Improve synchronization between test harness runtests.pl script
 | 
						||
  and test harness servers to minimize risk of false test failures.
 | 
						||
 | 
						||
Daniel Fandrich (22 Apr 2008)
 | 
						||
- Added support for running on Symbian OS.
 | 
						||
 | 
						||
Daniel Fandrich (18 Apr 2008)
 | 
						||
- Added test cases 1026 and 1027 to do some rudimentary tests on the --manual
 | 
						||
  and --help options.
 | 
						||
 | 
						||
Michal Marek (14 Apr 2008)
 | 
						||
- allow disabling the typechecker by defining CURL_DISABLE_TYPECHECK, as
 | 
						||
  discussed in http://curl.haxx.se/mail/lib-2008-04/0291.html
 | 
						||
 | 
						||
Daniel Stenberg (14 Apr 2008)
 | 
						||
- Stefan Krause reported a case where the OpenSSL handshake phase wasn't
 | 
						||
  properly acknowledging the timeout values, like if you pulled the network
 | 
						||
  plug in the midst of it.
 | 
						||
 | 
						||
- Andre Guibert de Bruet fixed a second case of not checking the malloc()
 | 
						||
  return code in the Negotiate code.
 | 
						||
 | 
						||
- Sandor Feldi reported bug #1942022
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1942022) pointing out a mistake in the
 | 
						||
  lib/Makefile.vc[68] makefiles' release-ssl-dll target.
 | 
						||
 | 
						||
- Brock Noland reported that curl behaved differently depending on which order
 | 
						||
  you used -i and -I.
 | 
						||
 | 
						||
Daniel Stenberg (12 Apr 2008)
 | 
						||
- Andre Guibert de Bruet found and fixed a case where malloc() was called but
 | 
						||
  was not checked for a NULL return, in the Negotiate code.
 | 
						||
 | 
						||
Daniel Fandrich (9 Apr 2008)
 | 
						||
- Added test cases 1024 & 1025 to test a scenario similar to the one reported
 | 
						||
  by Ben Combee where libcurl would send the wrong cookie to a redirected
 | 
						||
  server.  libcurl was doing the right thing in these test cases.
 | 
						||
 | 
						||
Michal Marek (7 Apr 2008)
 | 
						||
- Fix the MIT / Heimdal check for good:
 | 
						||
  Define HAVE_GSSMIT if <gssapi/{gssapi.h,gssapi_generic.h,gssapi_krb5.h}> are
 | 
						||
  available, otherwise define HAVE_GSSHEIMDAL if <gssapi.h> is available.
 | 
						||
  
 | 
						||
  Only define GSS_C_NT_HOSTBASED_SERVICE to gss_nt_service_name if
 | 
						||
  GSS_C_NT_HOSTBASED_SERVICE isn't declared by the gssapi headers. This should
 | 
						||
  avoid breakage in case we wrongly recognize Heimdal as MIT again.
 | 
						||
 | 
						||
Daniel Stenberg (5 Apr 2008)
 | 
						||
- Alexey Simak fixed curl_easy_reset() to reset the max redirect limit properly
 | 
						||
 | 
						||
- Based on the Debian bug report #474224 that complained about the FTP error
 | 
						||
  message when libcurl doesn't get a 220 back immediately on connect, I now
 | 
						||
  changed it to be more specific on what the problem is. Also worth noticing:
 | 
						||
  while the bug report contains an example where the response is:
 | 
						||
 | 
						||
    421 There are too many connected users, please try again later
 | 
						||
 | 
						||
  we cannot assume that the error message will always be this readable nor
 | 
						||
  that it fits within a particular boundary etc.
 | 
						||
 | 
						||
Daniel Fandrich (3 Apr 2008)
 | 
						||
- Added test627 to test SFTP with CURLOPT_NOBODY
 | 
						||
 | 
						||
Daniel Stenberg (3 Apr 2008)
 | 
						||
- Setting CURLOPT_NOBODY to FALSE will now switch the HTTP request method to
 | 
						||
  GET simply because previously when you set CURLOPT_NOBODY to TRUE first and
 | 
						||
  then FALSE you'd end up in a broken state where a HTTP request would do a
 | 
						||
  HEAD by still act a lot like for a GET and hang waiting for the content etc.
 | 
						||
 | 
						||
- Scott Barrett added support for CURLOPT_NOBODY over SFTP
 | 
						||
 | 
						||
Daniel Fandrich (3 Apr 2008)
 | 
						||
- Made sure that curl_global_init is called in all the multithreaded
 | 
						||
  example programs.
 | 
						||
 | 
						||
Michal Marek (31 Mar 2008)
 | 
						||
- Removed the generated ca-bundle.h file. The verbatim value of $ca and
 | 
						||
  $capath is known to configure, so it can be defined in config.h instead.
 | 
						||
 | 
						||
Daniel Stenberg (31 Mar 2008)
 | 
						||
- Added CURLFORM_STREAM as a supported option to curl_formadd() to allow an
 | 
						||
  application to provide data for a multipart with the read callback. Note
 | 
						||
  that the size needs to be provided with CURLFORM_CONTENTSLENGTH when the
 | 
						||
  stream option is used. This feature is verified by the new test case
 | 
						||
  554. This feature was sponsored by Xponaut.
 | 
						||
 | 
						||
Daniel Fandrich (30 Mar 2008)
 | 
						||
- Changed the makefile so the doc/examples/ programs are never built in a
 | 
						||
  normal build/install (only with the 'make check' target), so that a
 | 
						||
  build failure in the examples isn't fatal.
 | 
						||
 | 
						||
Version 7.18.1 (30 March 2008)
 | 
						||
 | 
						||
Daniel Stenberg (28 Mar 2008)
 | 
						||
- Stephen Collyer pointed out that configure --with-libssh2 without a given
 | 
						||
  path didn't work properly.
 | 
						||
 | 
						||
Daniel Stenberg (27 Mar 2008)
 | 
						||
- As found out and reported by Dan Petitt, libcurl didn't show progress/call
 | 
						||
  the progress callback for the first (potentially huge) piece of body data
 | 
						||
  sent together with the POST request headers in the initial send().
 | 
						||
 | 
						||
Daniel Stenberg (25 Mar 2008)
 | 
						||
- Made setting the CURLOPT_SSL_CTX_FUNCTION option return a failure in case
 | 
						||
  libcurl wasn't built to use OpenSSL as that is a prerequisite for this
 | 
						||
  option to function!
 | 
						||
 | 
						||
Daniel Stenberg (22 Mar 2008)
 | 
						||
- Fixed the problem with doing a zero byte SCP transfer, verified with test
 | 
						||
  case 617 (which was added by Daniel Fandrich 5 Mar 2008).
 | 
						||
 | 
						||
Daniel Fandrich (20 Mar 2008)
 | 
						||
- Fixed a problem where curl-config --protocols could erroneously show LDAPS
 | 
						||
  support when curl didn't even have regular LDAP support.  It looks like
 | 
						||
  this could happen when the --enable-ldaps configure switch is given but
 | 
						||
  configure couldn't find the LDAP headers or libraries.
 | 
						||
 | 
						||
Michal Marek (20 Mar 2008)
 | 
						||
- Added --with-ca-path=DIRECTORY configure option to use an openSSL CApath by
 | 
						||
  default instead of a ca bundle. The configure script will also look for a
 | 
						||
  ca path if no ca bundle is found and no option given.
 | 
						||
 | 
						||
- Fixed detection of previously installed curl-ca-bundle.crt
 | 
						||
 | 
						||
Daniel Fandrich (18 Mar 2008)
 | 
						||
- Added test 626 to reproduce an infinite loop when given an invalid
 | 
						||
  SFTP quote command reported by Vincent Le Normand, and fixed it.
 | 
						||
 | 
						||
Michal Marek (18 Mar 2008)
 | 
						||
- Added curl_easy_getinfo typechecker.
 | 
						||
 | 
						||
- Added macros for curl_share_setopt and curl_multi_setopt to check at least
 | 
						||
  the correct number of arguments.
 | 
						||
 | 
						||
Daniel Fandrich (13 Mar 2008)
 | 
						||
- Added tests 622-625 to test SFTP/SCP uploads. Test 625 was an attempt to
 | 
						||
  reproduce the --ftp-create-dirs problem reported by Brian Ulm, but that
 | 
						||
  seems to need a call curl_easy_reset() which this test case doesn't do.
 | 
						||
 | 
						||
Daniel Stenberg (13 Mar 2008)
 | 
						||
- Brian Ulm figured out that if you did an SFTP upload with
 | 
						||
  CURLOPT_FTP_CREATE_MISSING_DIRS to create a directory, and then re-used the
 | 
						||
  handle and uploaded another file to another directory that needed to be
 | 
						||
  created, the second upload would fail. Another case of a state variable that
 | 
						||
  wasn't properly reset between requests.
 | 
						||
 | 
						||
- I rewrote the 100-continue code to use a single state variable instead of
 | 
						||
  the previous two ones. I think it made the logic somewhat clearer.
 | 
						||
 | 
						||
Daniel Stenberg (11 Mar 2008)
 | 
						||
- Dmitry Popov filed bug report #1911069
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1911069) that identified a race
 | 
						||
  condition in the name resolver code when the DNS cache is shared between
 | 
						||
  multiple easy handles, each running in simultaneous threads that could cause
 | 
						||
  crashes.
 | 
						||
 | 
						||
- Added a macro for curl_easy_setopt() that accepts three arguments and simply
 | 
						||
  does nothing with them, just to make sure libcurl users always use three
 | 
						||
  arguments to this function. Due to its use of ... for the third argument, it
 | 
						||
  is otherwise hard to detect abuse.
 | 
						||
 | 
						||
Michal Marek (11 Mar 2008)
 | 
						||
- Added a type checking macro for curl_easy_setopt(), needs gcc-4.3 and only
 | 
						||
  works in C mode atm (http://curl.haxx.se/mail/lib-2008-02/0267.html ,
 | 
						||
  http://curl.haxx.se/mail/lib-2008-02/0292.html )
 | 
						||
 | 
						||
Daniel Fandrich (10 Mar 2008)
 | 
						||
- Added tests 618-621 to test SFTP/SCP transfers of more than one file
 | 
						||
  (test 620 tests the just-fixed problem reported by Brian Ulm).
 | 
						||
 | 
						||
Daniel Stenberg (9 Mar 2008)
 | 
						||
- Brian Ulm reported a crash when doing a second SFTP transfer on a re-used
 | 
						||
  easy handle if curl_easy_reset() was used between them. I fixed it and Brian
 | 
						||
  verified that it cured his problem.
 | 
						||
 | 
						||
- Brian Ulm reported that if you first tried to download a non-existing SFTP
 | 
						||
  file and then fetched an existing one and re-used the handle, libcurl would
 | 
						||
  still report the second one as non-existing as well! I fixed it and Brian
 | 
						||
  verified that it cured his problem.
 | 
						||
 | 
						||
Michal Marek (6 Mar 2008)
 | 
						||
- Fix the gssapi configure check to detect newer MIT Kerberos (patch by
 | 
						||
  Michael Calmer)
 | 
						||
 | 
						||
Yang Tse (6 Mar 2008)
 | 
						||
- Fix regression on Curl_socket_ready() and Curl_poll() so that these will
 | 
						||
  again fail on select/poll errors different than EINTR.
 | 
						||
 | 
						||
Daniel Fandrich (5 Mar 2008)
 | 
						||
- Fixed the test harness so it will write out zero-length data files.
 | 
						||
 | 
						||
- Added tests 616 and 617 to see how SFTP and SCP cope with zero-length
 | 
						||
  files, as questioned by Mike Protts. SFTP does for me but SCP doesn't
 | 
						||
  so test 617 is disabled for now.
 | 
						||
 | 
						||
Daniel S (4 Mar 2008)
 | 
						||
- Mike Protts brought a patch that makes resumed transfers work with SFTP.
 | 
						||
 | 
						||
Daniel S (1 Mar 2008)
 | 
						||
- Anatoli Tubman found and fixed a crash with Negotiate authentication used on
 | 
						||
  a re-used connection where both requests used Negotiate.
 | 
						||
 | 
						||
Guenter Knauf (26 Feb 2008)
 | 
						||
- Kaspar Brand provided a patch to support server name indication (RFC 4366).
 | 
						||
 | 
						||
Daniel S (25 Feb 2008)
 | 
						||
- Kaspar Brand made GnuTLS-built libcurl properly acknowledge the option that
 | 
						||
  forces it to prefer SSLv3.
 | 
						||
 | 
						||
Daniel S (23 Feb 2008)
 | 
						||
- Sam Listopad provided a patch in feature-request #1900014
 | 
						||
  http://curl.haxx.se/bug/feature.cgi?id=1900014 that makes libcurl (built to
 | 
						||
  use OpenSSL) support a full chain of certificates in a given PKCS12
 | 
						||
  certificate.
 | 
						||
 | 
						||
Daniel S (22 Feb 2008)
 | 
						||
- Georg Lippitsch made the src/Makefile.vc6 makefile use the same memory model
 | 
						||
  options as the lib/Makefile.vc6 already did.
 | 
						||
 | 
						||
Daniel S (21 Feb 2008)
 | 
						||
- Zmey Petroff found a crash when libcurl accessed a NULL pointer, which
 | 
						||
  happened if you set the connection cache size to 1 and for example failed to
 | 
						||
  login to an FTP site. Bug report #1896698
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1896698)
 | 
						||
 | 
						||
Daniel S (20 Feb 2008)
 | 
						||
- Fixed test case 405 to not fail when libcurl is built with GnuTLS
 | 
						||
 | 
						||
- Based on initial work done by Gautam Kachroo to address a bug, we now keep
 | 
						||
  better control at the exact state of the connection's SSL status so that we
 | 
						||
  know exactly when it has completed the SSL negotiation or not so that there
 | 
						||
  won't be accidental re-uses of connections that are wrongly believed to be
 | 
						||
  in SSL-completed-negotiate state.
 | 
						||
 | 
						||
- We no longer support setting the CURLOPT_URL option from inside a callback
 | 
						||
  such as the CURLOPT_SSL_CTX_FUNCTION one treat that as if it was a Location:
 | 
						||
  following. The patch that introduced this feature was done for 7.11.0, but
 | 
						||
  this code and functionality has been broken since about 7.15.4 (March 2006)
 | 
						||
  with the introduction of non-blocking OpenSSL "connects".
 | 
						||
 | 
						||
  It was a hack to begin with and since it doesn't work and hasn't worked
 | 
						||
  correctly for a long time and nobody has even noticed, I consider it a very
 | 
						||
  suitable subject for plain removal. And so it was done.
 | 
						||
 | 
						||
Guenter Knauf (19 Feb 2008)
 | 
						||
- We do no longer support SSLv2 by default since it has known flaws.
 | 
						||
  Kaspar Brand provided a patch for all supported SSL toolkits.
 | 
						||
 
 | 
						||
Daniel Fandrich (19 Feb 2008)
 | 
						||
- Added test309 to test HTTP redirect to HTTPS URL
 | 
						||
 | 
						||
Daniel S (18 Feb 2008)
 | 
						||
- We're no longer providing a very old ca-bundle in the curl tarball. You can
 | 
						||
  get a fresh one downloaded and created with 'make ca-bundle' or you can get
 | 
						||
  one from here => http://curl.haxx.se/docs/caextract.html if you want a fresh
 | 
						||
  new one extracted from Mozilla's recent list of ca certs.
 | 
						||
 | 
						||
  The configure option --with-ca-bundle now lets you specify what file to use
 | 
						||
  as default ca bundle for your build. If not specified, the configure script
 | 
						||
  will check a few known standard places for a global ca cert to use.
 | 
						||
 | 
						||
Daniel S (17 Feb 2008)
 | 
						||
- Jerome Muffat-Meridol helped me fix Curl_done() to close the current
 | 
						||
  connection by force when it was called before the entire request is
 | 
						||
  completed, simply because we can't know if the connection really can be
 | 
						||
  re-used safely at that point.
 | 
						||
 | 
						||
- Based on the same debugging logic, I've also made Curl_http_done() not
 | 
						||
  return CURLE_GOT_NOTHING if called "prematurely". This should have no real
 | 
						||
  effect to anything but the code makes more sense like this.
 | 
						||
  
 | 
						||
Daniel S (15 Feb 2008)
 | 
						||
- Made the gnutls code path not even try to get the server cert if no peer
 | 
						||
  verification is requested. Previously it would even return failure if gnutls
 | 
						||
  failed to get the server cert even though no verification was asked for.
 | 
						||
  Public server showing the problem: https://www.net222.caisse-epargne.fr
 | 
						||
 | 
						||
- Fix my Curl_timeleft() leftover mistake in the gnutls code
 | 
						||
 | 
						||
- Pooyan McSporran found and fixed a flaw where you first would do a normal
 | 
						||
  http request and then you'd reuse the handle and replace the Accept: header,
 | 
						||
  as then libcurl would send two Accept: headers!
 | 
						||
 | 
						||
Daniel S (11 Feb 2008)
 | 
						||
- Yang Tse pointed out a few remaining quirks from my timeout refactoring from
 | 
						||
  Feb 7 that didn't abort properly on timeouts. These are actually old
 | 
						||
  problems but now they should be fixed.
 | 
						||
 | 
						||
Yang Tse (10 Feb 2008)
 | 
						||
- Bug report #1888932 (http://curl.haxx.se/bug/view.cgi?id=1888932) points out
 | 
						||
  and provides test program that demonstrates that libcurl might not set error
 | 
						||
  description message for error CURLE_COULDNT_RESOLVE_HOST for Windows threaded
 | 
						||
  name resolver builds. Fixed now.
 | 
						||
 | 
						||
Daniel Fandrich (8 Feb 2008)
 | 
						||
- Added key words to all SSL-using tests so they can be skipped if necessary.
 | 
						||
  Removed a few unnecessary requires SSL statements.
 | 
						||
 | 
						||
Daniel S (8 Feb 2008)
 | 
						||
- Mike Hommey filed and fixed bug report #1889856
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1889856): When using the gnutls ssl
 | 
						||
  layer, cleaning-up and reinitializing curl ends up with https requests
 | 
						||
  failing with "ASN1 parser: Element was not found" errors. Obviously a
 | 
						||
  regression added in 7.16.3.
 | 
						||
 | 
						||
Yang Tse (8 Feb 2008)
 | 
						||
- Improved test harness SCP/SFTP start up server verification, doing a real
 | 
						||
  connection to the sftp server, authenticating and running a simple sftp
 | 
						||
  pwd command using the test harness generated configuration and key files.
 | 
						||
 | 
						||
Daniel S (8 Feb 2008)
 | 
						||
- G<>nter Knauf added lib/mk-ca-bundle.pl which gets the Firefox ca bundle and
 | 
						||
  creates a suitable ca-bundle.crt file in PEM format for use with curl. The
 | 
						||
  recommended way to run it is to use 'make ca-bundle' in the build tree root.
 | 
						||
 | 
						||
Daniel Fandrich (7 Feb 2008)
 | 
						||
- Added tests 1022 and 1023 to validate output of curl-config --version and
 | 
						||
  --vernum
 | 
						||
 | 
						||
Daniel S (7 Feb 2008)
 | 
						||
- Refactored a lot of timeout code into a few functions in an attempt to make
 | 
						||
  them all use the same (hopefully correct) logic to make it less error-prone
 | 
						||
  and easier to introduce library-wide where it should be used.
 | 
						||
 | 
						||
Yang Tse (6 Feb 2008)
 | 
						||
- Fix an issue in strdup replacement function when dealing with absolutely
 | 
						||
  huge strings. Only systems without a standard strdup would be affected.
 | 
						||
 | 
						||
Daniel S (3 Feb 2008)
 | 
						||
- Dmitry Kurochkin cleaned up the pipelining code and removed the need for and
 | 
						||
  use of the "is_in_pipeline" struct field.
 | 
						||
 | 
						||
- I wrote up and added the threaded-ssl.c example source code that shows how
 | 
						||
  to do multi-threaded downloads of HTTPS files with a libcurl that is built
 | 
						||
  with OpenSSL. It uses pthreads for the threading.
 | 
						||
 | 
						||
Daniel S (31 Jan 2008)
 | 
						||
- Niklas Angebrand made the cookie support in libcurl properly deal with the
 | 
						||
  "HttpOnly" feature introduced by Microsoft and apparently also supported by
 | 
						||
  Firefox: http://msdn2.microsoft.com/en-us/library/ms533046.aspx . HttpOnly
 | 
						||
  is now supported when received from servers in HTTP headers, when written to
 | 
						||
  cookie jars and when read from existing cookie jars.
 | 
						||
 | 
						||
  I modified test case 31 and 46 to also do some basic HttpOnly testing.
 | 
						||
 | 
						||
- Dmitry Kurochkin moved several struct fields from the connectdata struct to
 | 
						||
  the SingleRequest one to make pipelining better. It is a bit tricky to keep
 | 
						||
  them in the right place, to keep things related to the actual request or to
 | 
						||
  the actual connection in the right place.
 | 
						||
 | 
						||
Daniel S (29 Jan 2008)
 | 
						||
- Dmitry Kurochkin fixed Curl_done() for pipelining, as it could previously
 | 
						||
  crash!
 | 
						||
 | 
						||
- Michal Marek fixed minor mistake in test case 553 that prevented it from
 | 
						||
  working on other IP-addresses or port numbers.
 | 
						||
 | 
						||
Version 7.18.0 (28 January 2008)
 | 
						||
 | 
						||
Daniel S (27 Jan 2008)
 | 
						||
- Dmitry Kurochkin: In "real world" testing I found more bugs in
 | 
						||
  pipelining. Broken connection is not restored and we get into infinite
 | 
						||
  loop. It happens because of wrong is_in_pipeline values.
 | 
						||
 | 
						||
Daniel S (26 Jan 2008)
 | 
						||
- Kevin Reed filed bug report #1879375
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1879375) which describes how libcurl
 | 
						||
  got lost in this scenario: proxy tunnel (or HTTPS over proxy), ask to do any
 | 
						||
  proxy authentication and the proxy replies with an auth (like NTLM) and then
 | 
						||
  closes the connection after that initial informational response.
 | 
						||
 | 
						||
  libcurl would not properly re-initialize the connection to the proxy and
 | 
						||
  continue the auth negotiation like supposed. It does now however, as it will
 | 
						||
  now detect if one or more authentication methods were available and asked
 | 
						||
  for, and will thus retry the connection and continue from there.
 | 
						||
 | 
						||
- I made the progress callback get called properly during proxy CONNECT.
 | 
						||
 | 
						||
Daniel S (23 Jan 2008)
 | 
						||
- Igor Franchuk pointed out that CURLOPT_COOKIELIST set to "ALL" leaked
 | 
						||
  memory, and so did "SESS". Fixed now.
 | 
						||
 | 
						||
Yang Tse (22 Jan 2008)
 | 
						||
- Check poll.h at configuration time, and use it when sys/poll.h unavailable
 | 
						||
 | 
						||
Daniel S (22 Jan 2008)
 | 
						||
- Dmitry Kurochkin removed the cancelled state for pipelining, as we agreed
 | 
						||
  that it is bad anyway. Starting now, removing a handle that is in used in a
 | 
						||
  pipeline will break the pipeline - it'll be set back up again but still...
 | 
						||
 | 
						||
Yang Tse (21 Jan 2008)
 | 
						||
- Disable ldap support for cygwin builds, since it breaks whole build process.
 | 
						||
  Fixing it will affect other platforms, so it is postponed for another release.
 | 
						||
 | 
						||
Daniel S (18 Jan 2008)
 | 
						||
- Lau Hang Kin found and fixed a problem with the multi interface when doing
 | 
						||
  CONNECT over a proxy. curl_multi_fdset() didn't report back the socket
 | 
						||
  properly during that state, due to a missing case in the switch in the
 | 
						||
  multi_getsock() function.
 | 
						||
 | 
						||
Yang Tse (17 Jan 2008)
 | 
						||
- Don't abort tests 518 and 537 when unable to raise the open-file soft limit.
 | 
						||
 | 
						||
Daniel S (16 Jan 2008)
 | 
						||
- Nathan Coulter's patch that makes runtests.pl respect the PATH when figuring
 | 
						||
  out what valgrind to run.
 | 
						||
 | 
						||
Yang Tse (16 Jan 2008)
 | 
						||
- Improved handling of out of memory in the command line tool that afected
 | 
						||
  data url encoded HTTP POSTs when reading it from a file.
 | 
						||
 | 
						||
Daniel S (16 Jan 2008)
 | 
						||
- Dmitry Kurochkin worked a lot on improving the HTTP Pipelining support that
 | 
						||
  previously had a number of flaws, perhaps most notably when an application
 | 
						||
  fired up N transfers at once as then they wouldn't pipeline at all that
 | 
						||
  nicely as anyone would think... Test case 530 was also updated to take the
 | 
						||
  improved functionality into account.
 | 
						||
 | 
						||
- Calls to Curl_failf() are not supposed to provide a trailing newline as the
 | 
						||
  function itself adds that. Fixed on 50 or something strings!
 | 
						||
 | 
						||
Daniel S (15 Jan 2008)
 | 
						||
- I made the torture test on test 530 go through. This was actually due to
 | 
						||
  silly code left from when we switched to let the multi handle "hold" the dns
 | 
						||
  cache when using the multi interface... Of course this only triggered when a
 | 
						||
  certain function call returned error at the correct moment.
 | 
						||
 | 
						||
Daniel S (14 Jan 2008)
 | 
						||
- Joe Malicki filed bug report #1871269
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1871269) and we could fix his hang-
 | 
						||
  problem that occurred when doing a large HTTP POST request with the
 | 
						||
  response-body read from a callback.
 | 
						||
 | 
						||
Daniel S (12 Jan 2008)
 | 
						||
- I re-arranged the curl --help output. All the options are now sorted on
 | 
						||
  their long option names and all descriptions are one-liners.
 | 
						||
 | 
						||
- Eric Landes provided the patch (edited by me) that introduces the
 | 
						||
  --keepalive-time to curl to set the keepalive probe interval. I also took
 | 
						||
  the opportunity to rename the recently added no-keep-alive option to
 | 
						||
  no-keepalive to keep a consistent naming and to avoid getting two dashes in
 | 
						||
  these option names. Eric also provided an update to the man page for the new
 | 
						||
  option.
 | 
						||
 | 
						||
Daniel S (11 Jan 2008)
 | 
						||
- Daniel Egger made CURLOPT_RANGE work on file:// URLs the very same way it
 | 
						||
  already worked for FTP:// URLs.
 | 
						||
 | 
						||
- I made the curl tool switch from using CURLOPT_IOCTLFUNCTION to now use the
 | 
						||
  spanking new CURLOPT_SEEKFUNCTION simply to take advantage of the improved
 | 
						||
  performance for the upload resume cases where you want to upload the last
 | 
						||
  few bytes of a very large file. To implement this decently, I had to switch
 | 
						||
  the client code for uploading from fopen()/fread() to plain open()/read() so
 | 
						||
  that we can use lseek() to do >32bit seeks (as fseek() doesn't allow that)
 | 
						||
  on systems that offer support for that.
 | 
						||
 | 
						||
Daniel S (10 Jan 2008)
 | 
						||
- Michal Marek made curl-config --libs not include /usr/lib64 in the output
 | 
						||
  (it already before skipped /usr/lib).  /usr/lib64 is the default library
 | 
						||
  directory on many 64bit systems and it's unlikely that anyone would use the
 | 
						||
  path privately on systems where it's not.
 | 
						||
 | 
						||
- Georg Lippitsch brought CURLOPT_SEEKFUNCTION and CURLOPT_SEEKDATA to allow
 | 
						||
  libcurl to seek in a given input stream. This is particularly important when
 | 
						||
  doing upload resumes when there's already a huge part of the file present
 | 
						||
  remotely. Before, and still if this callback isn't used, libcurl will read
 | 
						||
  and through away the entire file up to the point to where the resuming
 | 
						||
  begins (which of course can be a slow opereration depending on file size,
 | 
						||
  I/O bandwidth and more). This new function will also be preferred to get
 | 
						||
  used instead of the CURLOPT_IOCTLFUNCTION for seeking back in a stream when
 | 
						||
  doing multi-stage HTTP auth with POST/PUT.
 | 
						||
 | 
						||
- Nikitinskit Dmitriy filed bug report #1868255
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1868255) with a patch. It identifies
 | 
						||
  and fixes a problem with parsing WWW-Authenticate: headers with additional
 | 
						||
  spaces in the line that the parser wasn't written to deal with.
 | 
						||
 | 
						||
Daniel S (8 Jan 2008)
 | 
						||
- Introducing curl_easy_pause() and new magic return codes for both the read
 | 
						||
  and the write callbacks that now can make a connection's reading and/or
 | 
						||
  writing get paused.
 | 
						||
 | 
						||
Daniel S (6 Jan 2008)
 | 
						||
- Jeff Johnson filed bug report #1863171
 | 
						||
  (http://curl.haxx.se/bug/view.cgi?id=1863171) where he pointed out that
 | 
						||
  libcurl's date parser didn't accept a +1300 time zone which actually is used
 | 
						||
  fairly often (like New Zealand's Dailight Savings Time), so I modified the
 | 
						||
  parser to now accept up to and including -1400 to +1400.
 | 
						||
 | 
						||
Daniel S (5 Jan 2008)
 | 
						||
- Based on further discussion on curl-library, I reverted yesterday's SOCKS5
 | 
						||
  code to instead introduce support for a new proxy type called
 | 
						||
  CURLPROXY_SOCKS5_HOSTNAME that is used to send the host name to the proxy
 | 
						||
  instead of IP address and there's thus no longer any need for a new
 | 
						||
  curl_easy_setopt() option.
 | 
						||
 | 
						||
  The default SOCKS5 proxy is again back to sending the IP address to the
 | 
						||
  proxy.  The new curl command line option for enabling sending host name to a
 | 
						||
  SOCKS5 proxy is now --socks5-hostname.
 | 
						||
 | 
						||
Daniel S (4 Jan 2008)
 | 
						||
- Based on Maxim Perenesenko's patch, we now do SOCKS5 operations and let the
 | 
						||
  proxy do the host name resolving and only if --socks5ip (or
 | 
						||
  CURLOPT_SOCKS5_RESOLVE_LOCAL) is used we resolve the host name locally and
 | 
						||
  pass on the IP address only to the proxy.
 | 
						||
 | 
						||
Yang Tse (3 Jan 2008)
 | 
						||
- Modified test harness to allow SCP, SFTP and SOCKS4 tests to run with
 | 
						||
  OpenSSH 2.9.9, SunSSH 1.0 or later versions. SOCKS5 tests need OpenSSH
 | 
						||
  3.7, SunSSH 1.0 or later.
 | 
						||
 | 
						||
Daniel S (2 Jan 2008)
 | 
						||
- I fixed two cases of missing return code checks when handling chunked
 | 
						||
  decoding where a write error (or abort return from a callback) didn't stop
 | 
						||
  libcurl's processing.
 | 
						||
 | 
						||
- I removed the socklen_t use from the public curl/curl.h header and instead
 | 
						||
  made it an unsigned int. The type was only used in the curl_sockaddr struct
 | 
						||
  definition (only used by the curl_opensocket_callback). On all platforms I
 | 
						||
  could find information about, socklen_t is 32 unsigned bits large so I don't
 | 
						||
  think this will break the API or ABI. The main reason for this change is of
 | 
						||
  course for all the platforms that don't have a socklen_t definition in their
 | 
						||
  headers to build fine again. Providing our own configure magic and custom
 | 
						||
  definition of socklen_t on those systems proved to work but was a lot of
 | 
						||
  cruft, code and extra magic needed - when this very small change of type
 | 
						||
  seems harmless and still solves the missing socklen_t problem.
 | 
						||
 | 
						||
- Richard Atterer brought a patch that added support for SOCKS4a proxies,
 | 
						||
  which is an inofficial PROXY4 variant that sends the hostname to the proxy
 | 
						||
  instead of the resolved address (which is already supported by SOCKS5).
 | 
						||
  --socks4a is the curl command line option for it and CURLOPT_PROXYTYPE can
 | 
						||
  now be set to CURLPROXY_SOCKS4A as well.
 | 
						||
 | 
						||
Daniel S (1 Jan 2008)
 | 
						||
- Mohun Biswas pointed out that --libcurl generated a source code with an int
 | 
						||
  function but without a return statement. While fixing that, I also took care
 | 
						||
  about adding some better comments for the generated code.
 | 
						||
 |