RELEASE-NOTES: synced

http2: revert call the handle-closed function correctly on closed stream

Reverts 252790c5335a221

Assisted-by: Gergely Nagy
Fixes #7400
Closes #7525

auth: do not append zero-terminator to authorisation id in kerberos

RFC4752 Section 3.1 states "The authorization identity is not terminated
with a zero-valued (%x00) octet". Although a

auth: do not append zero-terminator to authorisation id in kerberos

RFC4752 Section 3.1 states "The authorization identity is not terminated
with a zero-valued (%x00) octet". Although a comment in code said it may
be needed anyway, nothing confirms it. In addition, servers may consider
it as part of the identity, causing a failure.

Closes #7008

show more ...

auth: use sasl authzid option in kerberos

... instead of deriving it from active ticket.
Closes #7008

auth: we do not support a security layer after kerberos authentication

Closes #7008

auth: properly handle byte order in kerberos security message

Closes #7008

x509asn1: fix heap over-read when parsing x509 certificates

Assisted-by: Patrick Monnerat
Closes #7536

KNOWN_BUGS: Disconnects don't do verbose

Closes #6995

mailmap: fixup Michał Antoniak

build: fix compiler warnings

For when CURL_DISABLE_VERBOSE_STRINGS and DEBUGBUILD flags are both
active.

- socks.c : warning C4100: 'lineno': unreferenced formal parameter

build: fix compiler warnings

For when CURL_DISABLE_VERBOSE_STRINGS and DEBUGBUILD flags are both
active.

- socks.c : warning C4100: 'lineno': unreferenced formal parameter
(co-authored by Daniel Stenberg)

- mbedtls.c: warning C4189: 'port': local variable is initialized but
not referenced

- schannel.c: warning C4189: 'hostname': local variable is initialized
but not referenced

Cloes #7528

show more ...

CODE_STYLE-md: fix bold font style

Markdown gets confused with abundance of asterisks, so use underscores
instead.

Reviewed-by: Daniel Gustafsson
Closes #7569

CODE_STYLE-md: add missing comma

Reviewed-by: Daniel Gustafsson
Closes #7570

examples/ephiperfifo.c: simplify signal handler

The signal handler registered for SIGINT is only handling SIGINT
so there isn't much need for inspecting the signo. While there,
rena

examples/ephiperfifo.c: simplify signal handler

The signal handler registered for SIGINT is only handling SIGINT
so there isn't much need for inspecting the signo. While there,
rename the handler to be more specific.

g_should_exit should really be of sig_atomic_t type, but relying
on autoconf in the examples seems like a bad idea so keep that
for now.

Reviewed-by: Daniel Stenberg
Closes #7310

show more ...

c-hyper: initial step for 100-continue support

Enabled test 154

Closes #7568

vtls: fix typo in schannel_verify.c

occurence -> occurrence

Closes #7566

curl_url_get.3: clarify about path and query

The current man-page lacks some details regarding the obtained path and
query.

Closes #7563

c-hyper: fix header value passed to debug callback

Closes #7567

cleanup: URL updates

- replace broken URL with the one it was most probably pointing to
when added (lib/tftp.c)
- replace broken URL with archive.org link (lib/curl_ntlm_wb.c)

cleanup: URL updates

- replace broken URL with the one it was most probably pointing to
when added (lib/tftp.c)
- replace broken URL with archive.org link (lib/curl_ntlm_wb.c)
- delete unnecessary protocol designator from archive.org URL
(docs/BINDINGS.md)

Closes #7562

show more ...

DEPRECATE.md: linkify curl-library mailing list

Closes #7561

output.d: add method to suppress response bodies

Closes #7560

TODO: remove 'c-ares deviates on http://1346569778'

Fixed since 56a037cc0ad1b2 (7.77.0)

BINDINGS.md: update links to use https where available

Closes #7558

asyn-ares.c: move all version number checks to the top

... and use #ifdef [feature] in the code as per our guidelines.

ares: use ares_getaddrinfo()

ares_getaddrinfo() is the getaddrinfo() cloned provided by c-ares, introduced
in version 1.16.0.

With older c-ares versions, curl invokes ares_getho

ares: use ares_getaddrinfo()

ares_getaddrinfo() is the getaddrinfo() cloned provided by c-ares, introduced
in version 1.16.0.

With older c-ares versions, curl invokes ares_gethostbyname() twice - once for
IPv4 and once for IPv6 to resolve both addresses, and then combines the
returned results.

Reported-by: jjandesmet
Fixes #7364
Closes #7552

show more ...

ngtcp2: utilize crypto API functions to simplify

Closes #7551