RELEASE-NOTES: synced

RELEASE-NOTES: curl 7.71.1

THANKS: add contributors to 7.71.1

scripts/copyright.pl: skip .dcignore

Revert "multi: implement wait using winsock events"

This reverts commit 8bc25c590e530de87595d1bb3577f699eb1309b9.

That commit (from #5397) introduced a regression in 7.71.0.

Revert "multi: implement wait using winsock events"

This reverts commit 8bc25c590e530de87595d1bb3577f699eb1309b9.

That commit (from #5397) introduced a regression in 7.71.0.

Reported-by: tmkk on github
Fixes #5631
Closes #5632

show more ...

TODO: Add flag to specify download directory

TODO: return code to CURLMOPT_PUSHFUNCTION to fail connection

cirrus-ci: disable FreeBSD 13 (again)

It has been failing for a good while again. This time we better leave it
disabled until we have more reason to believe it behaves.

Closes #

cirrus-ci: disable FreeBSD 13 (again)

It has been failing for a good while again. This time we better leave it
disabled until we have more reason to believe it behaves.

Closes #5628

show more ...

ngtcp2: sync with current master

ngtcp2 added two new callbacks

Reported-by: Lucien Zürcher
Fixes #5624
Closes #5627

examples/multithread.c: call curl_global_cleanup()

Reported-by: qiandu2006 on github
Fixes #5622
Closes #5623

vtls: compare cert blob when finding a connection to reuse

Reported-by: Gergely Nagy
Fixes #5617
Closes #5619

RELEASE-NOTES: synced

terminology: call them null-terminated strings

Updated terminology in docs, comments and phrases to refer to C strings
as "null-terminated". Done to unify with how most other C oriented

terminology: call them null-terminated strings

Updated terminology in docs, comments and phrases to refer to C strings
as "null-terminated". Done to unify with how most other C oriented docs
refer of them and what users in general seem to prefer (based on a
single highly unscientific poll on twitter).

Reported-by: coinhubs on github
Fixes #5598
Closes #5608

show more ...

http: fix proxy auth with blank password

Regression in 7.71.0

Added test case 346 to verify.

Reported-by: Kristoffer Gleditsch
Fixes #5613
Closes #5616

.dcignore: ignore tests and docs directories

This is a config file for deepcode.ai, a static code analyzer.

tool_cb_hdr: Fix etag warning output and return code

- Return 'failure' on failure, to follow the existing style.

- Put Warning: and the warning message on the same line.

R

tool_cb_hdr: Fix etag warning output and return code

- Return 'failure' on failure, to follow the existing style.

- Put Warning: and the warning message on the same line.

Ref: https://github.com/curl/curl/issues/5610

Closes https://github.com/curl/curl/pull/5612

show more ...

CURLOPT_READFUNCTION.3: provide the upload data size up front

Assisted-by: Jay Satiro
Closes #5607

test1539: do a HTTP 1.0 POST without a set size (fails)

Attempt to reproduce #5593. Test case 1514 is very similar but uses
HTTP/1.1 and thus switches to chunked.

Closes #5595

mbedtls: fix build with disabled proxy support

Don't reference fields that do not exist. Fixes build failure:

vtls/mbedtls.c: In function 'mbed_connect_step1':
vtls/mbedtls.c:24

mbedtls: fix build with disabled proxy support

Don't reference fields that do not exist. Fixes build failure:

vtls/mbedtls.c: In function 'mbed_connect_step1':
vtls/mbedtls.c:249:54: error: 'struct connectdata' has no member named 'http_proxy'

Closes #5615

show more ...

codeql-analysis.yml: fix the 'languages' setting

It needs a 'with:' in front of it.

gtihub: codeql-analysis.yml

enables code security scanning with github actions

tests: verify newline in username and password for HTTP

test 1296 is a simply command line test

test 1910 is a libcurl test including a redirect

url: allow user + password to contain "control codes" for HTTP(S)

Reported-by: Jon Johnson Jr
Fixes #5582
Closes #5592

escape: make the URL decode able to reject only %00 bytes

... or all "control codes" or nothing.

Assisted-by: Nicolas Sterchele

http2: set the correct URL in pushed transfers

...previously CURLINFO_EFFECTIVE_URL would report the URL of the
original "mother transfer", not the actually pushed resource.

Rep

http2: set the correct URL in pushed transfers

...previously CURLINFO_EFFECTIVE_URL would report the URL of the
original "mother transfer", not the actually pushed resource.

Reported-by: Jonathan Cardoso Machado
Fixes #5589
Closes #5591

show more ...