curl/lib
Kamil Dudka 7a1538d9cc nss: improve error handling in Curl_nss_random()
The vtls layer now checks the return value, so it is no longer necessary
to abort if a random number cannot be provided by NSS.  This also fixes
the following Coverity report:

Error: FORWARD_NULL (CWE-476):
lib/vtls/nss.c:1918: var_compare_op: Comparing "data" to null implies that "data" might be null.
lib/vtls/nss.c:1923: var_deref_model: Passing null pointer "data" to "Curl_failf", which dereferences it.
lib/sendf.c:154:3: deref_parm: Directly dereferencing parameter "data".
2015-02-25 10:23:06 +01:00
..
vtls nss: improve error handling in Curl_nss_random() 2015-02-25 10:23:06 +01:00
.gitignore
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c asyn-ares: We prefer use of 'CURLcode result' 2014-12-14 16:21:01 +00:00
asyn-thread.c code/docs: Use correct case for IPv4 and IPv6 2014-12-27 11:31:55 +00:00
asyn.h
base64.c cleanups: reduce variable scope 2014-10-14 09:44:06 +02:00
bundles.c
bundles.h
checksrc.pl
CMakeLists.txt cmake: install the dll file to the correct directory 2015-02-20 14:17:32 +01:00
config-amigaos.h
config-dos.h Remove all traces of FBOpenSSL SPNEGO support 2014-07-16 17:26:08 +02:00
config-mac.h
config-os400.h OS400: enable NTLM authentication 2014-12-05 18:42:39 +01:00
config-riscos.h
config-symbian.h ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
config-tpf.h config-tpf.h: Fixed up line lengths > 79 characters 2014-08-10 20:38:09 +01:00
config-vxworks.h ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
config-win32.h ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
config-win32ce.h ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
conncache.c conncache: Fixed specifiers in infof() for long and size_t variables 2014-11-19 20:04:21 +00:00
conncache.h create_conn: prune dead connections 2014-08-12 23:33:56 +02:00
connect.c connect: wait for IPv4 connection attempts 2015-02-23 13:32:28 +01:00
connect.h code/docs: Use correct case for IPv4 and IPv6 2014-12-27 11:31:55 +00:00
content_encoding.c
content_encoding.h
cookie.c cookies: Improved OOM handling in cookies 2014-12-09 23:58:30 +01:00
cookie.h
curl_addrinfo.c code/docs: Use Unix rather than UNIX to avoid use of the trademark 2014-12-26 21:42:44 +00:00
curl_addrinfo.h libcurl: add UNIX domain sockets support 2014-12-04 02:52:19 +01:00
curl_base64.h base64: added Curl_base64url_encode() 2014-07-25 08:24:03 +02:00
curl_config.h.cmake ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
curl_des.c des: Added Curl_des_set_odd_parity() 2015-01-28 22:34:49 +00:00
curl_des.h des: Added Curl_des_set_odd_parity() 2015-01-28 22:34:49 +00:00
curl_endian.c curl_endian: Fixed build when 64-bit integers are not supported (Part 2) 2015-01-16 23:01:27 +00:00
curl_endian.h endian: Added big endian read functions 2015-01-01 20:45:29 +00:00
curl_fnmatch.c
curl_fnmatch.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c sasl_gssapi: Fixed honouring of no mutual authentication 2014-12-04 22:05:14 +00:00
curl_gssapi.h gssapi: Remove need for duplicated GSS_C_NT_HOSTBASED_SERVICE definitions 2015-01-09 20:37:47 +00:00
curl_hmac.h
curl_ldap.h
curl_md4.h curl_md4.h: Updated copyright year following recent edit 2014-12-06 19:36:27 +00:00
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
curl_multibyte.h ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP 2015-01-18 20:52:43 +00:00
curl_ntlm_core.c unit1600: unit test for Curl_ntlm_core_mk_nt_hash 2015-02-03 21:03:11 +01:00
curl_ntlm_core.h ntlm: Disable NTLM v2 when 64-bit integers are not supported 2014-12-12 22:34:16 +00:00
curl_ntlm_msgs.c endian: Fixed Linux compilation issues 2014-12-31 14:02:25 +00:00
curl_ntlm_msgs.h sasl: Reduced the need for two sets of NTLM functions 2014-11-23 16:45:30 +00:00
curl_ntlm_wb.c ntlm_wb_response: fix "statement not reached" 2014-12-10 22:45:19 +01:00
curl_ntlm_wb.h build: Fixed no NTLM support for email when CURL_DISABLE_HTTP is defined 2014-11-09 12:54:34 +00:00
curl_ntlm.c http_ntlm: Fixed additional NSS initialisation call when decoding type-2 2014-11-23 16:05:08 +00:00
curl_ntlm.h build: Fixed no NTLM support for email when CURL_DISABLE_HTTP is defined 2014-11-09 12:54:34 +00:00
curl_rtmp.c rtmp: Use standard naming for setup connection function 2014-12-24 17:12:12 +00:00
curl_rtmp.h
curl_sasl_gssapi.c sasl_gssapi: Make Curl_sasl_build_gssapi_spn() public 2015-01-18 15:42:26 +00:00
curl_sasl_sspi.c sasl: Corrected formatting of function descriptions 2014-12-05 07:57:29 +00:00
curl_sasl.c curl_sasl.c: More code policing 2015-02-02 16:50:39 +00:00
curl_sasl.h sasl: remove XOAUTH2 from default enabled authentication mechanism. 2015-01-27 18:08:18 +01:00
curl_sec.h krb5_encode: remove unused argument 2014-10-08 12:25:07 +02:00
curl_setup_once.h
curl_setup.h curl_setup: Disable SMB/CIFS support when HTTP only 2015-01-26 18:48:44 +00:00
curl_sspi.c ntlm: Moved the identity generation into shared SSPI code 2014-04-06 00:35:22 +01:00
curl_sspi.h schannel: Moved the ISC return flag definitions to the SSPI module 2014-12-30 00:14:58 +00:00
curl_threads.c win32: Updated some legacy APIs to use the newer extended versions 2014-11-16 17:30:17 +00:00
curl_threads.h win32: Updated some legacy APIs to use the newer extended versions 2014-11-16 17:30:17 +00:00
curlx.h
dict.c dict: fix memory leak in OOM exit path 2014-02-14 08:21:41 +01:00
dict.h
dotdot.c copyright: Updated following recent edits 2014-04-28 23:20:52 +01:00
dotdot.h copyright: Updated following recent edits 2014-04-28 23:20:52 +01:00
easy.c Curl_client_write() & al.: chop long data, convert data only once. 2014-12-09 15:43:51 +01:00
easyif.h
escape.c code cleanup: We prefer 'CURLcode result' 2014-10-28 22:45:32 +00:00
escape.h
file.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
file.h
fileinfo.c
fileinfo.h
firefox-db2pem.sh
formdata.c curl_easy_duphandle: CURLOPT_COPYPOSTFIELDS read out of bounds 2014-11-05 08:05:14 +01:00
formdata.h
ftp.c ftp: accept all 2xx responses to the PORT command 2015-02-11 19:51:57 +01:00
ftp.h FTP: fix IPv6 host using link-local address 2015-01-08 22:32:37 +01:00
ftplistparser.c code/docs: Use Unix rather than UNIX to avoid use of the trademark 2014-12-26 21:42:44 +00:00
ftplistparser.h
getenv.c
getinfo.c getinfo: Code style policing 2014-12-27 17:49:33 +00:00
getinfo.h
gopher.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
gopher.h
hash.c
hash.h
hmac.c
hostasyn.c hostasyn: Prefer 'CURLcode result' for curl result codes 2015-02-04 00:07:39 +00:00
hostcheck.c vtls: remove QsoSSL 2014-10-13 16:33:47 +02:00
hostcheck.h
hostip4.c code/docs: Use correct case for IPv4 and IPv6 2014-12-27 11:31:55 +00:00
hostip6.c code/docs: Use correct case for IPv4 and IPv6 2014-12-27 11:31:55 +00:00
hostip.c hostip: remove 'stale' argument from Curl_fetch_addr proto 2015-01-07 14:06:12 +00:00
hostip.h hostip: remove 'stale' argument from Curl_fetch_addr proto 2015-01-07 14:06:12 +00:00
hostsyn.c
http2.c http2: Fix bug that associated stream canceled on PUSH_PROMISE 2015-02-09 15:52:56 +01:00
http2.h http2: fix switched macro when http2 is not enabled 2014-11-13 15:39:15 +01:00
http_chunks.c chunked-encoding: provide a readable error string for chunked errors 2014-03-14 15:44:18 +01:00
http_chunks.h chunked-encoding: provide a readable error string for chunked errors 2014-03-14 15:44:18 +01:00
http_digest.c http_digest: Post SSPI support tidy up 2014-11-06 23:15:24 +00:00
http_digest.h http_digest: Moved algorithm definitions to SASL module 2014-11-05 13:40:08 +00:00
http_negotiate_sspi.c http_negotiate: Added empty decoded challenge message info text 2015-01-17 14:58:36 +00:00
http_negotiate.c http_negotiate: Use dynamic buffer for SPN generation 2015-01-18 15:45:12 +00:00
http_negotiate.h http_negotiate: Return CURLcode in Curl_input_negotiate() instead of int 2015-01-17 14:57:17 +00:00
http_proxy.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
http_proxy.h remote_port: allow connect to port 0 2014-03-05 17:38:05 +00:00
http.c http_negotiate: Return CURLcode in Curl_input_negotiate() instead of int 2015-01-17 14:57:17 +00:00
http.h HTTP2: Support expect: 100-continue 2014-08-02 23:15:46 +02:00
idn_win32.c copyright: Updated the copyright year following recent updates 2014-12-14 22:39:27 +00:00
if2ip.c ip2ip.c: Fixed compilation warning when IPv6 Scope ID not supported 2014-12-26 13:28:29 +00:00
if2ip.h IPV6: address scope != scope id 2014-12-16 13:52:06 +01:00
imap.c imap: remove automatic password setting: it breaks external sasl authentication 2015-01-27 17:34:40 +01:00
imap.h SASL: common state engine for imap/pop3/smtp 2015-01-20 17:33:05 +01:00
inet_ntop.c
inet_ntop.h
inet_pton.c
inet_pton.h
krb5.c gssapi: Remove need for duplicated GSS_C_NT_HOSTBASED_SERVICE definitions 2015-01-09 20:37:47 +00:00
ldap.c ldap: build with BoringSSL 2015-01-28 14:22:11 +01:00
libcurl.def
libcurl.plist
libcurl.rc
libcurl.vers.in
llist.c
llist.h
Makefile.am
makefile.amiga
Makefile.b32 build: updated dependencies in makefiles. 2014-12-05 14:54:25 +01:00
makefile.dj
Makefile.inc By request, change the name of "curl_darwinssl.[ch]" to "darwinssl.[ch]" 2015-02-15 17:11:01 -06:00
Makefile.m32 Merge pull request #134 from vszakats/mingw-m64 2015-01-09 22:03:12 +01:00
Makefile.netware NetWare build: added TLS-SRP enabled build. 2015-01-08 21:40:35 +01:00
Makefile.vc6 Makefile.vc6: Corrected typos in rename of darwinssl.obj 2015-02-16 00:35:16 +00:00
Makefile.vxworks build: updated dependencies in makefiles. 2014-12-05 14:54:25 +01:00
Makefile.Watcom build: updated dependencies in makefiles. 2014-12-05 14:54:25 +01:00
md4.c MD(4|5): make the MD4_* and MD5_* functions static 2015-02-06 14:26:32 +01:00
md5.c md5: use axTLS's own MD5 functions when available 2015-02-06 14:36:25 +01:00
memdebug.c
memdebug.h
mk-ca-bundle.pl mk-ca-bundle.pl: restored forced run again. 2014-12-13 13:46:45 +01:00
mk-ca-bundle.vbs mk-ca-bundle.vbs: update copyright year. 2014-11-18 13:47:13 +01:00
mprintf.c mprintf: allow %.s with data not being zero terminated 2014-05-04 23:39:52 +02:00
multi.c hostip: remove 'stale' argument from Curl_fetch_addr proto 2015-01-07 14:06:12 +00:00
multihandle.h multi: convert CURLM_STATE_CONNECT_PEND handling to a list 2014-09-02 10:17:47 +02:00
multiif.h multi: inform about closed sockets before they are closed 2014-11-19 13:22:07 +01:00
netrc.c netrc: fixed thread safety problem by using getpwuid_r if available 2014-07-13 00:27:22 +02:00
netrc.h
non-ascii.c non-ascii: Reduce variable usage 2014-12-20 14:43:02 +00:00
non-ascii.h
nonblock.c
nonblock.h
nwlib.c
nwos.c
objnames-test08.sh
objnames-test10.sh
objnames.inc
openldap.c openldap: Prefer use of 'CURLcode result' 2014-12-27 22:50:50 +00:00
parsedate.c parsedate.c: Fixed compilation warning 2014-12-10 11:38:38 +00:00
parsedate.h
pingpong.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
pingpong.h
pipeline.c code cleanup: We prefer 'CURLcode result' 2014-10-28 22:45:32 +00:00
pipeline.h
pop3.c sasl: implement EXTERNAL authentication mechanism. 2015-01-27 17:24:55 +01:00
pop3.h SASL: common state engine for imap/pop3/smtp 2015-01-20 17:33:05 +01:00
progress.c Ensure progress.size_dl/progress.size_ul are always >= 0 2014-09-07 23:23:12 +02:00
progress.h timers: fix timer regression involving redirects / reconnects 2014-05-15 21:28:19 +02:00
rawstr.c
rawstr.h
README.ares
README.curl_off_t
README.curlx
README.encoding
README.hostip code/docs: Use correct case for IPv4 and IPv6 2014-12-27 11:31:55 +00:00
README.http2 README.http2: updated to reflect current status 2014-09-15 23:13:35 +02:00
README.httpauth
README.memoryleak
README.multi_socket
README.pingpong
README.pipelining
rtsp.c INFILESIZE: fields in UserDefined must not be changed run-time 2014-04-26 18:17:10 +02:00
rtsp.h
security.c security: avoid compiler warning 2015-01-28 10:10:59 +01:00
select.c select.c: fix compilation for VxWorks 2014-11-25 08:55:17 +01:00
select.h
sendf.c Curl_client_write() & al.: chop long data, convert data only once. 2014-12-09 15:43:51 +01:00
sendf.h Curl_client_write() & al.: chop long data, convert data only once. 2014-12-09 15:43:51 +01:00
setup-os400.h vtls: remove QsoSSL 2014-10-13 16:33:47 +02:00
setup-vms.h VMS: Updates for 0740-0D1220 2014-12-21 16:55:28 +01:00
share.c
share.h
sigpipe.h
slist.c
slist.h
smb.c smb: Use endian functions for reading NBT and message size values 2015-01-01 20:48:05 +00:00
smb.h smb: Use the connection's upload buffer 2014-12-30 13:10:30 +00:00
smtp.c sasl: implement EXTERNAL authentication mechanism. 2015-01-27 17:24:55 +01:00
smtp.h SASL: common state engine for imap/pop3/smtp 2015-01-20 17:33:05 +01:00
sockaddr.h
socks_gssapi.c gssapi: Remove need for duplicated GSS_C_NT_HOSTBASED_SERVICE definitions 2015-01-09 20:37:47 +00:00
socks_sspi.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
socks.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
socks.h docs: Improve inline GSS-API naming in code documentation 2014-07-23 00:01:39 +02:00
speedcheck.c low-speed-limit: avoid timeout flood 2014-08-31 23:50:01 +02:00
speedcheck.h
splay.c copyright: Updated following recent edits 2014-04-28 23:20:52 +01:00
splay.h
ssh.c SFTP: work-around servers that return zero size on STAT 2014-12-16 09:49:17 +01:00
ssh.h libssh2: detect features based on version, not configure checks 2014-11-09 15:43:27 +01:00
strdup.c strdup: Removed irrelevant comment 2014-11-05 12:53:06 +00:00
strdup.h curl_easy_duphandle: CURLOPT_COPYPOSTFIELDS read out of bounds 2014-11-05 08:05:14 +01:00
strequal.c
strequal.h
strerror.c url: add CURLOPT_SSL_VERIFYSTATUS option 2015-01-16 23:23:29 +01:00
strerror.h
strtok.c
strtok.h
strtoofft.c
strtoofft.h copyright: Updated the copyright year following recent updates 2014-12-14 22:39:27 +00:00
telnet.c Revert "telnet.c: fix handling of 0 being returned from custom read function" 2015-02-25 00:16:10 +01:00
telnet.h
tftp.c ftp: Use 'CURLcode result' for curl result codes 2015-02-05 20:31:12 +00:00
tftp.h
timeval.c timeval: typecast for better type (on Amiga) 2015-01-20 08:53:14 +01:00
timeval.h
transfer.c Curl_pretransfer: reset expected transfer sizes 2015-01-14 23:31:57 +01:00
transfer.h
url.c configure: allow both --with-ca-bundle and --with-ca-path 2015-02-20 16:30:04 +01:00
url.h
urldata.h url: add CURLOPT_SSL_VERIFYSTATUS option 2015-01-16 23:23:29 +01:00
version.c smb: Disable SMB when 64-bit integers are not supported 2014-12-12 22:34:18 +00:00
warnless.c tool_getparam.c: Fixed compilation warnings 2014-05-22 21:01:51 +01:00
warnless.h tool_getparam.c: Fixed compilation warnings 2014-05-22 21:01:51 +01:00
wildcard.c
wildcard.h
x509asn1.c code cleanup: we prefer 'CURLcode result' 2014-10-24 08:23:19 +02:00
x509asn1.h Implement pinned public key in GSKit backend 2014-10-14 14:58:26 +02:00

HTTP Pipelining with libcurl
============================

Background

Since pipelining implies that one or more requests are sent to a server before
the previous response(s) have been received, we only support it for multi
interface use.

Considerations

When using the multi interface, you create one easy handle for each transfer.
Bascially any number of handles can be created, added and used with the multi
interface - simultaneously. It is an interface designed to allow many
simultaneous transfers while still using a single thread. Pipelining does not
change any of these details.

API

We've added a new option to curl_multi_setopt() called CURLMOPT_PIPELINING
that enables "attempted pipelining" and then all easy handles used on that
handle will attempt to use an existing pipeline.

Details

- A pipeline is only created if a previous connection exists to the same IP
  address that the new request is being made to use.

- Pipelines are only supported for HTTP(S) as no other currently supported
  protocol has features resemembling this, but we still name this feature
  plain 'pipelining' to possibly one day support it for other protocols as
  well.

- HTTP Pipelining is for GET and HEAD requests only.

- When a pipeline is in use, we must take precautions so that when used easy
  handles (i.e those who still wait for a response) are removed from the multi
  handle, we must deal with the outstanding response nicely.

- Explicitly asking for pipelining handle X and handle Y won't be supported.
  It isn't easy for an app to do this association. The lib should probably
  still resolve the second one properly to make sure that they actually _can_
  be considered for pipelining. Also, asking for explicit pipelining on handle
  X may be tricky when handle X get a closed connection.