mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2024-12-27 06:59:43 +08:00
Code Issues Packages Projects Releases Wiki Activity
24,455 Commits 14 Branches 222 Tags 194 MiB
C 74.9%
Perl 8.1%
M4 4.9%
Python 4.2%
CMake 2.5%
Other 5.4%
b96282010e
Go to file
Daniel Gustafsson b96282010e http: clarify header buffer size calculation 
The header buffer size calculation can from static analysis seem to
overlow as it performs an addition between two size_t variables and
stores the result in a size_t variable. Overflow is however guarded
against elsewhere since the input to the addition is regulated by
the maximum read buffer size. Clarify this with a comment since the
question was asked.

Reviewed-by: Daniel Stenberg <daniel@haxx.se>
2019-06-24 23:35:06 +02:00
.github .github/FUNDING: mention our opencollective "home" [ci skip] 2019-05-23 11:16:23 +02:00
CMake build: fix Codacy warnings 2019-06-05 20:38:06 +02:00
docs KNOWN_BUGS: Don't clear digest for single realm 2019-06-24 23:26:59 +02:00
include typecheck: add 3 missing strings and a callback data pointer 2019-06-22 00:12:55 +02:00
lib http: clarify header buffer size calculation 2019-06-24 23:35:06 +02:00
m4 configure/cmake: check for if_nametoindex() 2019-05-22 09:49:19 +02:00
packages os400: make vsetopt() non-static as Curl_vsetopt() for os400 support. 2019-06-16 01:05:53 +02:00
projects checksrc.bat: Ignore snprintf warnings in docs/examples 2019-05-11 02:32:49 -04:00
scripts scripts: fix typos 2019-03-31 22:55:09 +02:00
src curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds 2019-06-24 12:45:01 +02:00
tests test153: fix content-length to avoid occasional hang 2019-06-24 08:33:32 +02:00
winbuild winbuild: use WITH_PREFIX if given 2019-06-17 13:39:51 +02:00
.cirrus.yml cirrus: Customize the disabled tests per FreeBSD version 2019-04-01 10:16:10 +02:00
.dir-locals.el
.gitattributes .gitattributes: make tabs in indentation a visible error 2018-12-06 20:21:17 +01:00
.gitignore scripts/completion.pl: also generate fish completion file 2019-03-02 11:31:18 +01:00
.lgtm.yml CI: add lgtm.yml for tweaking lgtm.com analysis 2018-03-22 00:04:55 +01:00
.mailmap URL and mailmap updates, remove an obsolete directory [ci skip] 2018-09-22 07:58:32 +00:00
.travis-iconv-env.sh travis: add build with iconv enabled 2018-02-15 14:18:34 +01:00
.travis.yml travis: enable alt-svc for coverage build 2019-06-20 13:28:39 +02:00
acinclude.m4 configure: add --with-amissl 2019-03-15 10:22:42 +01:00
appveyor.yml appveyor: add Visual Studio solution build 2019-05-29 10:04:43 +02:00
buildconf includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
buildconf.bat whitespace fixes 2018-09-23 22:24:02 +00:00
CHANGES CHANGES: spell fix, use correct path to script 2017-02-07 08:22:37 +01:00
CMakeLists.txt Revert "cmake: add SMB to list of disabled protocols if HTTP_ONLY is specified" 2019-06-11 15:19:47 +02:00
configure.ac configure: --disable-progress-meter 2019-06-18 22:33:26 +02:00
COPYING COPYING: it's 2019 2019-01-19 20:26:31 +01:00
curl-config.in curl-config.in: remove dependency on bc 2018-10-26 00:06:19 +02:00
GIT-INFO CHANGES.0: removed 2017-02-07 08:20:10 +01:00
libcurl.pc.in
MacOSX-Framework includes: remove curl/curlbuild.h and curl/curlrules.h 2017-06-14 11:07:33 +02:00
Makefile.am scripts/completion.pl: also generate fish completion file 2019-03-02 11:31:18 +01:00
Makefile.dist build: remove the Borland specific makefiles 2018-06-02 11:23:40 +02:00
maketgz maketgz: delete .bak files, fix indentation 2018-06-15 23:28:34 +00:00
README docs: minor polish to the bug bounty / security docs 2019-04-29 08:09:10 +02:00
README.md docs: minor polish to the bug bounty / security docs 2019-04-29 08:09:10 +02:00
RELEASE-NOTES RELEASE-NOTES: synced 2019-06-24 08:29:53 +02:00
SECURITY.md SECURITY.md: created 2019-06-10 10:16:02 +02:00

README.md

curl logo

CII Best Practices Coverity passed Travis-CI Build Status AppVeyor Build Status Cirrus Build Status Coverage Status Backers on Open Collective Sponsors on Open Collective Language Grade: C/C++ Codacy Badge

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how!

You find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms and similar. If you distribute curl binaries or other binaries that involve libcurl, you might enjoy the LICENSE-MIXING document.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Website

Visit the curl web site for the latest news and downloads.

Git

To download the very latest source from the Git server do this:

git clone https://github.com/curl/curl.git

(you'll get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public!

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]