curl/lib
Daniel Stenberg 49465fffdb cookies: tricked dotcounter fixed
Providing multiple dots in a series in the domain field (domain=..com) could
trick the cookie engine to wrongly accept the cookie believing it to be
fine. Since the tailmatching would then match all .com sites, the cookie would
then be sent to all of them.

The code now requires at least one letter between each dot for them to be
counted. Edited test case 61 to verify this.
2010-12-23 22:52:32 +01:00
..
.gitignore gitignore: ignore Makefile.vc10.dist made by maketgz 2010-10-13 00:26:19 +02:00
amigaos.c
amigaos.h
arpa_telnet.h
axtls.c Fixed include: memory.h -> curl_memory.h. 2010-12-22 03:34:13 +01:00
axtls.h Initial axTLS integration. Connections can be made and some tests pass. 2010-12-15 16:05:17 +01:00
base64.c
CMakeLists.txt
config-amigaos.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-dos.h build: provide SIZEOF_SIZE_T DOS definition 2010-12-03 04:15:39 +01:00
config-mac.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-os400.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-riscos.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-symbian.h
config-tpf.h
config-vms.h build: provide SIZEOF_SIZE_T VMS definition 2010-12-03 03:40:16 +01:00
config-vxworks.h
config-win32.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
config-win32ce.h build: provide SIZEOF_SIZE_T definition for non-configure builds 2010-12-02 21:41:23 +01:00
connect.c multi: connect fail => use next IP address 2010-12-23 22:21:24 +01:00
connect.h fix getinfo CURLINFO_LOCAL* for reused connections (take 2) 2010-11-30 22:14:37 +01:00
content_encoding.c inflate_stream: remove redundant check that is always true 2010-09-12 16:34:16 +02:00
content_encoding.h
cookie.c cookies: tricked dotcounter fixed 2010-12-23 22:52:32 +01:00
cookie.h
curl_addrinfo.c Curl_getaddrinfo_ex: sanitize function results follow-up. 2010-11-24 04:36:57 +01:00
curl_addrinfo.h CURLOPT_RESOLVE: added 2010-11-08 08:56:21 +01:00
curl_base64.h
curl_config.h.cmake
curl_fnmatch.c
curl_fnmatch.h
curl_gethostname.c
curl_gethostname.h
curl_hmac.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_rand.c
curl_rand.h
curl_rtmp.c disconnect: pass on the dead_connection argument 2010-12-06 15:33:38 +01:00
curl_rtmp.h
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curlx.h Typo fixes. 2010-12-21 22:39:56 +01:00
dict.c
dict.h
easy.c easy: fix compiler warning: end-of-loop code not reached 2010-12-07 03:27:59 +01:00
easyif.h
escape.c curl_easy_escape: don't escape "unreserved" characters 2010-09-28 23:49:32 +02:00
escape.h
file.c s/isspace/ISSPACE 2010-11-26 13:59:01 +01:00
file.h
fileinfo.c
fileinfo.h
firefox-db2pem.sh
formdata.c fix compiler warning 2010-11-08 04:03:11 +01:00
formdata.h formdata: provide error message 2010-10-20 14:57:43 +02:00
ftp.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
ftp.h
ftplistparser.c ftp_parselist: fix compiler warning 2010-12-19 00:15:12 +01:00
ftplistparser.h
getenv.c
getinfo.c fix getinfo CURLINFO_LOCAL* for reused connections (take 2) 2010-11-30 22:14:37 +01:00
getinfo.h
gopher.c fix compiler warning: rounding, sign extension, or loss of accuracy may result 2010-12-02 18:46:13 +01:00
gopher.h
gtls.c gtls: define and use gtls_EAGAIN, gtls_EINTR and gtls_EIO. 2010-11-20 05:02:02 +01:00
gtls.h
hash.c
hash.h
hmac.c fix compiler warning 2010-11-08 04:03:11 +01:00
hostares.c ares: ask for both IPv4 and IPv6 addresses 2010-12-18 22:33:27 +01:00
hostasyn.c ares: ask for both IPv4 and IPv6 addresses 2010-12-18 22:33:27 +01:00
hostip4.c ip_version: moved to connection struct 2010-11-11 15:16:21 +01:00
hostip6.c ip_version: moved to connection struct 2010-11-11 15:16:21 +01:00
hostip.c fix compiler warning: conversion may lose significant bits 2010-12-01 23:33:43 +01:00
hostip.h ip_version: moved to connection struct 2010-11-11 15:16:21 +01:00
hostsyn.c
hostthre.c ip_version: moved to connection struct 2010-11-11 15:16:21 +01:00
http_chunks.c http_chunks: remove debug output 2010-10-17 18:50:38 +02:00
http_chunks.h
http_digest.c fix compiler warning 2010-11-08 04:03:11 +01:00
http_digest.h
http_negotiate.c
http_negotiate.h
http_ntlm.c
http_ntlm.h
http.c Preparing for axTLS. Actual SSL API functions are only stubbed. 2010-12-15 16:05:17 +01:00
http.h
if2ip.c
if2ip.h
imap.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
imap.h
inet_ntop.c
inet_ntop.h
inet_pton.c inet_pton: fix compiler warning 2010-11-25 02:20:14 +01:00
inet_pton.h
krb4.c urldata: Capitalize enum protect_level values. 2010-11-13 14:42:34 -08:00
krb4.h security: tighten enum protection_level usage. 2010-11-13 14:12:43 -08:00
krb5.c urldata: Capitalize enum protect_level values. 2010-11-13 14:42:34 -08:00
ldap.c atoi: remove atoi usage 2010-11-28 23:11:14 +01:00
libcurl.def
libcurl.imp
libcurl.plist
libcurl.rc
llist.c
llist.h
Makefile.am build: lib/config.dos renamed to lib/config-dos.h 2010-12-03 04:13:33 +01:00
makefile.amiga
Makefile.b32
makefile.dj build: lib/config.dos renamed to lib/config-dos.h 2010-12-03 04:13:33 +01:00
Makefile.inc Preparing for axTLS. Actual SSL API functions are only stubbed. 2010-12-15 16:05:17 +01:00
Makefile.m32 Updated OpenSSL version. 2010-12-05 10:59:58 +01:00
Makefile.netware Added support for axTLS to NetWare build. 2010-12-22 04:45:41 +01:00
Makefile.vc6 build: sort configuration hunks in lib/Makefile.vc6 2010-12-21 00:14:55 +01:00
Makefile.vxworks
Makefile.Watcom Updated OpenSSL version. 2010-12-05 10:59:58 +01:00
md4.c
md5.c
memdebug.c
memdebug.h
mk-ca-bundle.pl
mk-ca-bundle.vbs
mprintf.c
msvcproj.foot
msvcproj.head
multi.c multi: inhibit some verbose outputs 2010-12-22 15:29:21 +01:00
multiif.h
netrc.c
netrc.h
nonblock.c
nonblock.h
nss.c
nssg.h
nwlib.c
nwos.c
openldap.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
parsedate.c fix compiler warning: conversion may lose significant bits 2010-12-01 23:33:43 +01:00
parsedate.h
pingpong.c Trival comment fix. 2010-12-18 17:08:23 +01:00
pingpong.h
polarssl.c fix compiler warning 2010-11-08 04:03:11 +01:00
polarssl.h
pop3.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
pop3.h
progress.c
progress.h
qssl.c
qssl.h
rawstr.c
rawstr.h
README.ares README.ares: we know require c-ares 1.6.0 2010-09-30 23:14:58 +02:00
README.curl_off_t
README.curlx
README.encoding
README.hostip
README.httpauth
README.memoryleak
README.multi_socket
README.pingpong
README.pipelining
rtsp.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
rtsp.h url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
security.c urldata: Capitalize enum protect_level values. 2010-11-13 14:42:34 -08:00
select.c
select.h
sendf.c Curl_send/recv_plain: return errno on failure 2010-12-05 23:04:11 +01:00
sendf.h
setup_once.h
setup-os400.h
setup.h Preparing for axTLS. Actual SSL API functions are only stubbed. 2010-12-15 16:05:17 +01:00
share.c
share.h
slist.c
slist.h
smtp.c SMTP: add brackets for MAIL FROM 2010-12-22 14:41:53 +01:00
smtp.h
sockaddr.h
socks_gssapi.c
socks_sspi.c
socks.c
socks.h
speedcheck.c
speedcheck.h
splay.c
splay.h
ssh.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
ssh.h
sslgen.c Preparing for axTLS. Actual SSL API functions are only stubbed. 2010-12-15 16:05:17 +01:00
sslgen.h
ssluse.c ossl_seed: no more RAND_screen 2010-12-23 14:36:07 +01:00
ssluse.h
strdup.c
strdup.h
strequal.c
strequal.h
strerror.c
strerror.h
strtok.c
strtok.h
strtoofft.c
strtoofft.h Typo fixes. 2010-12-21 22:39:56 +01:00
telnet.c
telnet.h
tftp.c url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
tftp.h
timeval.c
timeval.h
transfer.c loadhostpairs: return errorcode 2010-12-20 22:22:02 +01:00
transfer.h
url.c Curl_do: avoid using stale conn pointer 2010-12-18 22:35:37 +01:00
url.h url: provide dead_connection flag in Curl_handler::disconnect 2010-12-06 14:35:42 +01:00
urldata.h multi: connect fail => use next IP address 2010-12-23 22:21:24 +01:00
vc6libcurl.dsw
vc8proj.foot
vc8proj.head
version.c
warnless.c fix compiler warning: conversion may lose significant bits 2010-12-04 05:53:07 +01:00
warnless.h fix compiler warning: conversion may lose significant bits 2010-12-04 05:53:07 +01:00
wildcard.c
wildcard.h

HTTP Pipelining with libcurl
============================

Background

Since pipelining implies that one or more requests are sent to a server before
the previous response(s) have been received, we only support it for multi
interface use.

Considerations

When using the multi interface, you create one easy handle for each transfer.
Bascially any number of handles can be created, added and used with the multi
interface - simultaneously. It is an interface designed to allow many
simultaneous transfers while still using a single thread. Pipelining does not
change any of these details.

API

We've added a new option to curl_multi_setopt() called CURLMOPT_PIPELINING
that enables "attempted pipelining" and then all easy handles used on that
handle will attempt to use an existing pipeline.

Details

- A pipeline is only created if a previous connection exists to the same IP
  address that the new request is being made to use.

- Pipelines are only supported for HTTP(S) as no other currently supported
  protocol has features resemembling this, but we still name this feature
  plain 'pipelining' to possibly one day support it for other protocols as
  well.

- HTTP Pipelining is for GET and HEAD requests only.

- When a pipeline is in use, we must take precautions so that when used easy
  handles (i.e those who still wait for a response) are removed from the multi
  handle, we must deal with the outstanding response nicely.

- Explicitly asking for pipelining handle X and handle Y won't be supported.
  It isn't easy for an app to do this association. The lib should probably
  still resolve the second one properly to make sure that they actually _can_
  be considered for pipelining. Also, asking for explicit pipelining on handle
  X may be tricky when handle X get a closed connection.

- We need options to control max pipeline length, and probably how to behave
  if we reach that limit. As was discussed on the list, it can probably be
  made very complicated, so perhaps we can think of a way to pass all
  variables involved to a callback and let the application decide how to act
  in specific situations. Either way, these fancy options are only interesting
  to work on when everything is working and we have working apps to test with.