Go to file
Adam Sampson 45a560390c
curl: do bounds check using a double comparison
The fix for this in 8661a0aacc wasn't
complete: if the parsed number in num is larger than will fit in a long,
the conversion is undefined behaviour (causing test1427 to fail for me
on IA32 with GCC 7.1, although it passes on AMD64 and ARMv7).  Getting
rid of the cast means the comparison will be done using doubles.

It might make more sense for the max argument to also be a double...

Fixes #1750
Closes #1749
2017-08-09 19:24:16 +02:00
.github ISSUE_TEMPLATE: Add a comment not to file security issues on github 2017-07-11 11:48:37 -04:00
CMake cmake: fix send/recv argument scanner for windows 2017-07-05 09:49:30 +02:00
docs make install: add 8 missing man pages to the installation 2017-08-09 11:31:10 +02:00
include system.h: include winsock2.h before windows.h 2017-07-12 07:55:18 +02:00
lib docs/comments: Update to secure URL versions 2017-08-08 21:41:07 +02:00
m4 ax_code_coverage.m4: update to latest version 2017-08-08 08:43:26 +02:00
packages docs/comments: Update to secure URL versions 2017-08-08 21:41:07 +02:00
projects build-wolfssl: Sync config with wolfSSL 3.11 2017-05-31 01:40:39 -04:00
scripts updatemanpages.pl: error out on too old git version 2017-06-03 00:45:31 +02:00
src curl: do bounds check using a double comparison 2017-08-09 19:24:16 +02:00
tests docs/comments: Update to secure URL versions 2017-08-08 21:41:07 +02:00
winbuild BUILD.WINDOWS: mention buildconf.bat for builds off git 2017-08-03 13:50:44 +02:00
.dir-locals.el
.gitattributes .gitattributes: force shell scripts to LF 2017-04-17 08:32:13 +02:00
.gitignore test: add impacket for SMB testing 2017-07-04 10:36:06 +02:00
.travis.yml travis: explicitly specify dist 2017-08-04 09:59:42 +02:00
acinclude.m4 configure: fix recv/send/select detection on Android 2017-08-08 21:40:16 +02:00
appveyor.yml AppVeyor: now really use CURL_WERROR 2017-07-29 18:47:18 +02:00
buildconf includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
buildconf.bat includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
CHANGES CHANGES: spell fix, use correct path to script 2017-02-07 08:22:37 +01:00
cmake_uninstall.cmake.in cmake: support make uninstall 2017-07-30 01:56:14 +02:00
CMakeLists.txt CMake: fix CURL_WERROR for MSVC 2017-08-04 12:01:24 +02:00
configure.ac configure: fix the check for IdnToUnicode 2017-08-01 01:04:45 +02:00
COPYING COPYING: update the generic copyright year range 2017-01-07 20:25:43 +01:00
curl-config.in URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
GIT-INFO CHANGES.0: removed 2017-02-07 08:20:10 +01:00
libcurl.pc.in URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
MacOSX-Framework includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
Makefile.am build: fix 'make install' with configure, install docs/libcurl/* too 2017-08-09 10:29:49 +02:00
Makefile.dist VC: remove the makefile.vc6 build infra 2017-01-23 14:27:32 +01:00
maketgz maketgz: switch to -6e for xz 2017-06-24 00:04:58 +02:00
README URLs: follow GitHub project rename (also Travis CI) 2016-02-04 23:01:38 +01:00
README.md README.md: show the coverall coverage on github 2017-06-06 14:40:57 +02:00
RELEASE-NOTES RELEASE-NOTES: curl 7.55.0 2017-08-09 07:50:35 +02:00

curl logo CII Best Practices Coverity passed Build Status Coverage Status

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how!

You find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms and similar. If you distribute curl binaries or other binaries that involve libcurl, you might enjoy the LICENSE-MIXING document.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Website

Visit the curl web site for the latest news and downloads.

Git

To download the very latest source off the Git server do this:

git clone https://github.com/curl/curl.git

(you'll get a directory named curl created, filled with the source code)

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.