Rene Bernhardt found and fixed a buffer overrun in the NTLM code, where
libcurl always and unconditionally overwrote a stack-based array with 3 zero
bytes. I edited the fix to make it less li

Rene Bernhardt found and fixed a buffer overrun in the NTLM code, where
libcurl always and unconditionally overwrote a stack-based array with 3 zero
bytes. I edited the fix to make it less likely to occur again (and added
a comment explaining the reason to the buffer size).

show more ...

explicit typecasts to prevent warnings

typecasts to prevent compiler warnings

remove trailing whitespace

curl_global_init_mem() allows the memory functions to be replaced.
memory.h is included everywhere for this.

General HTTP authentication cleanup and fixes

'authdone' was added to the sessionhandle and thus was removed from the
argument to the NTLM function(s)

Enabled 'NT responses' in the NTLM type-3 message.

don't compare signed/unsigned

strlen() returns size_t

adjusted to the modified base64 protos

The base64 encode function now takes a size_t for size, not an int as
previously.

updated year in the copyright string

typecasts to prevent warnings

make no user or no password just mean blank fields, not aborted operation

weird typo removed

When we issue a HTTP request, first make sure if the authentication phase
is over or not, as if it isn't we shall not begin any PUT or POST operation.

This cures bug report #805853, and

When we issue a HTTP request, first make sure if the authentication phase
is over or not, as if it isn't we shall not begin any PUT or POST operation.

This cures bug report #805853, and test case 88 verifies it!

show more ...

no user or password set, bail out

added include "http.h" to prevent a warning

Serge Semashko added CURLOPT_PROXYAUTH support, and now NTLM for proxies
work.

More support for NTLM on proxies, now proxy state and nonce is stored in
a separate struct properly.

adjusted to support NTLM for proxies

Access the user and passwd fields from the connectdata struct now instead
of the sessionhandle struct, as that was not good.

Moved the NTLM credentials to the connectdata struct instead, as NTLM
authenticates connections and not single requests. This should make it work
better when we mix requests from multiple hos

Moved the NTLM credentials to the connectdata struct instead, as NTLM
authenticates connections and not single requests. This should make it work
better when we mix requests from multiple hosts. Problem pointed out by
Cris Bailiff.

show more ...

Dan Winship's patch added that makes use of DOMAIN\USER or DOMAIN/USER
for the user field. I changed it slightly to stay with strchr() only instead
of strpbrk() for portability reasons.