HISTORY: OSS-Fuzz started fuzzing libcurl in 2017

RELEASE-NOTES: synced

ngtcp2: Support the latest update key callback type

- Remove our cb_update_key in favor of ngtcp2's new
ngtcp2_crypto_update_key_cb which does the same thing.

Several days ago

ngtcp2: Support the latest update key callback type

- Remove our cb_update_key in favor of ngtcp2's new
ngtcp2_crypto_update_key_cb which does the same thing.

Several days ago the ngtcp2_update_key callback function prototype was
changed in ngtcp2/ngtcp2@42ce09c. Though it would be possible to
fix up our cb_update_key for that change they also added
ngtcp2_crypto_update_key_cb which does the same thing so we'll use that
instead.

Ref: https://github.com/ngtcp2/ngtcp2/commit/42ce09c

Closes https://github.com/curl/curl/pull/4735

show more ...

sws: search for "Testno:" header uncondtionally if no testno

Even if the initial request line wasn't found. With the fix to 1455, the
test number is now detected correctly.

(Pro

sws: search for "Testno:" header uncondtionally if no testno

Even if the initial request line wasn't found. With the fix to 1455, the
test number is now detected correctly.

(Problem found when running tests in random order.)

Closes #4744

show more ...

tests: set LC_ALL in more tests

Follow-up to 23208e330ac0c21

Closes #4743

test165: set LC_ALL=en_US.UTF-8 too

On my current Debian Unstable with libidn2 2.2.0, I get an error if
LC_ALL is set to blank. Then curl errors out with:

curl: (3) Failed to co

test165: set LC_ALL=en_US.UTF-8 too

On my current Debian Unstable with libidn2 2.2.0, I get an error if
LC_ALL is set to blank. Then curl errors out with:

curl: (3) Failed to convert www.åäö.se to ACE; could not convert string to UTF-8

Closes #4738

show more ...

curl.h: add two defines for the "pre ISO C" case

Without this fix, this caused a compilation failure on AIX with IBM xlc
13.1.3 compiler.

Reported-by: Ram Krushna Mishra
Fix

curl.h: add two defines for the "pre ISO C" case

Without this fix, this caused a compilation failure on AIX with IBM xlc
13.1.3 compiler.

Reported-by: Ram Krushna Mishra
Fixes #4739
Closes #4740

show more ...

create_conn: prefer multiplexing to using new connections

... as it would previously prefer new connections rather than
multiplexing in most conditions! The (now removed) code was a left

create_conn: prefer multiplexing to using new connections

... as it would previously prefer new connections rather than
multiplexing in most conditions! The (now removed) code was a leftover
from the Pipelining code that was translated wrongly into a
multiplex-only world.

Reported-by: Kunal Ekawde
Bug: https://curl.haxx.se/mail/lib-2019-12/0060.html
Closes #4732

show more ...

test1456: remove the use of a fixed local port

Fixup the test to instead not compare the port number. It sometimes
caused problems like this:

"curl: (45) bind failed with errno

test1456: remove the use of a fixed local port

Fixup the test to instead not compare the port number. It sometimes
caused problems like this:

"curl: (45) bind failed with errno 98: Address already in use"

Closes #4733

show more ...

CURLOPT_QUOTE.3: fix typos

Prior to this change the EXAMPLE in the QUOTE/PREQUOTE/POSTQUOTE man
pages would not compile because a variable name was incorrect.

Reported-by: Bylon

CURLOPT_QUOTE.3: fix typos

Prior to this change the EXAMPLE in the QUOTE/PREQUOTE/POSTQUOTE man
pages would not compile because a variable name was incorrect.

Reported-by: Bylon2@users.noreply.github.com

Fixes https://github.com/curl/curl/issues/4736

show more ...

strerror: Fix compiler warning "empty expression"

- Remove the final semi-colon in the SEC2TXT() macro definition.

Before: #define SEC2TXT(sec) case sec: txt = #sec; break;

strerror: Fix compiler warning "empty expression"

- Remove the final semi-colon in the SEC2TXT() macro definition.

Before: #define SEC2TXT(sec) case sec: txt = #sec; break;

After: #define SEC2TXT(sec) case sec: txt = #sec; break

Prior to this change SEC2TXT(foo); would generate break;; which caused
the empty expression warning.

Ref: https://github.com/curl/curl/commit/5b22e1a#r36458547

show more ...

curl/parseconfig: use curl_free() to free memory allocated by libcurl

Reported-by: bxac on github
Fixes #4730
Closes #4731

curl/parseconfig: fix mem-leak

When looping, first trying '.curlrc' and then '_curlrc', the function
would not free the first string.

Closes #4731

CURLOPT_URL.3: "curl supports SMB version 1 (only)"

[skip ci]

test1270: a basic -w redirect_url test

Closes #4728

HISTORY: the SMB(S) support landed in 2014

define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore

It is covered by USE_OPENSSL_ENGINE now.

Reported-by: Gisle Vanem
Bug: https://github.com/curl/curl/commit/87b9

define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore

It is covered by USE_OPENSSL_ENGINE now.

Reported-by: Gisle Vanem
Bug: https://github.com/curl/curl/commit/87b9337c8f76c21c57b204e88b68c6ecf3bd1ac0#commitcomment-36447951

Closes #4725

show more ...

lib: remove ASSIGNWITHINCONDITION exceptions, use our code style

... even for macros

Reviewed-by: Daniel Gustafsson
Reviewed-by: Jay Satiro
Reported-by: Jay Satiro
Fixes

lib: remove ASSIGNWITHINCONDITION exceptions, use our code style

... even for macros

Reviewed-by: Daniel Gustafsson
Reviewed-by: Jay Satiro
Reported-by: Jay Satiro
Fixes #4683
Closes #4722

show more ...

tests: make sure checksrc runs on header files too

Revert "checksrc: fix regexp for ASSIGNWITHINCONDITION"

This reverts commit ba82673dac3e8d00a76aa5e3779a0cb80e7442af.

Bug: #4683

KNOWN_BUGS: TLS session cache doesn't work with TFO

[skip ci]
Closes #4301

KNOWN_BUGS: Connection information when using TCP Fast Open

Also point to #4296 for more details
Closes #4296

KNOWN_BUGS: LDAP on Windows doesn't work

Closes #4261

docs: TLS SRP doesn't work with TLS 1.3

Reported-by: sayrer on github
Closes #4262
[skip ci]

cirrus: Switch to the FreeBSD 12.1 point release & enable more tests.

A few tests are now passing on FreeBSD, so no longer skip them.
[skip ci]