curl/lib
Daniel Stenberg d715d2ac89
urlapi: stricter CURLUPART_PORT parsing
Only allow well formed decimal numbers in the input.

Document that the number MUST be between 1 and 65535.

Add tests to test 1560 to verify the above.

Ref: https://github.com/curl/curl/issues/3753
Closes #3762
2019-04-13 11:17:30 +02:00
..
vauth vauth/cleartext: Update the PLAIN login function signature to match RFC 4616 2019-04-11 22:43:30 +01:00
vtls openssl: mark connection for close on TLS close_notify 2019-04-12 12:17:52 +02:00
.gitattributes
.gitignore
altsvc.c lib: Fix typos in comments 2019-03-22 11:39:03 +01:00
altsvc.h alt-svc: the libcurl bits 2019-03-03 11:17:52 +01:00
amigaos.c configure: add --with-amissl 2019-03-15 10:22:42 +01:00
amigaos.h configure: add --with-amissl 2019-03-15 10:22:42 +01:00
arpa_telnet.h
asyn-ares.c build: fix Codacy/CppCheck warnings 2019-04-11 21:08:44 +02:00
asyn-thread.c threaded-resolver: shutdown the resolver thread without error message 2019-03-01 09:31:34 +01:00
asyn.h curl_multi_remove_handle() don't block terminating c-ares requests 2019-01-07 10:05:20 +01:00
base64.c
checksrc.pl checksrc: add COPYRIGHTYEAR check 2018-12-03 23:13:40 +01:00
CMakeLists.txt
config-amigaos.h
config-dos.h
config-mac.h
config-os400.h os400: Disable Alt-Svc by default since it's experimental 2019-03-24 16:43:43 -04:00
config-riscos.h
config-symbian.h
config-tpf.h
config-vxworks.h configure: remove the unused fdopen macro 2019-02-22 22:38:33 +01:00
config-win32.h
config-win32ce.h
conncache.c conncache: use conn->data to know if a transfer owns it 2019-03-17 18:07:20 +01:00
conncache.h pipelining: removed 2019-04-06 22:49:50 +02:00
connect.c urldata: convert bools to bitfields and move to end 2019-02-27 08:37:56 +01:00
connect.h cleanup: make local functions static 2019-02-10 18:38:57 +01:00
content_encoding.c
content_encoding.h
cookie.c Revert "cookies: extend domain checks to non psl builds" 2019-03-09 12:59:20 +01:00
cookie.h alt-svc: the libcurl bits 2019-03-03 11:17:52 +01:00
curl_addrinfo.c memdebug: log pointer before freeing its data 2019-03-12 21:45:03 +01:00
curl_addrinfo.h memdebug: make debug-specific functions use curl_dbg_ prefix 2019-03-08 23:21:21 +01:00
curl_base64.h
curl_config.h.cmake
curl_ctype.c
curl_ctype.h
curl_des.c
curl_des.h
curl_endian.c cleanup: make local functions static 2019-02-10 18:38:57 +01:00
curl_endian.h
curl_fnmatch.c fnmatch: disable if FTP is disabled 2019-02-12 07:50:39 +01:00
curl_fnmatch.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h gssapi: fix deprecated header warnings 2019-02-14 08:38:43 +01:00
curl_hmac.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c
curl_multibyte.h
curl_ntlm_core.c Secure Transport: no more "darwinssl" 2019-02-28 08:42:59 +01:00
curl_ntlm_core.h Revert "ntlm: remove USE_WIN32_CRYPTO check to get USE_NTLM2SESSION set" 2019-03-27 00:19:15 +01:00
curl_ntlm_wb.c strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
curl_ntlm_wb.h
curl_path.c curl_path: only enabled for SSH builds 2019-02-12 07:50:39 +01:00
curl_path.h
curl_printf.h
curl_range.c
curl_range.h
curl_rtmp.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
curl_rtmp.h
curl_sasl.c vauth/cleartext: Update the PLAIN login function signature to match RFC 4616 2019-04-11 22:43:30 +01:00
curl_sasl.h
curl_sec.h
curl_setup_once.h
curl_setup.h configure: add --with-amissl 2019-03-15 10:22:42 +01:00
curl_sha256.h
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curlx.h
dict.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
dict.h
doh.c doh: inherit some SSL options from user's easy handle 2019-03-11 01:50:12 -04:00
doh.h
dotdot.c
dotdot.h
easy.c CURLOPT_DNS_USE_GLOBAL_CACHE: remove 2019-04-11 22:22:39 +02:00
easyif.h
escape.c
escape.h
file.c file: fix "Checking if unsigned variable 'readcount' is less than zero." 2019-03-12 21:46:11 +01:00
file.h
fileinfo.c
fileinfo.h
firefox-db2pem.sh
formdata.c
formdata.h
ftp.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
ftp.h urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
ftplistparser.c ftplistparser: fix LGTM alert "Empty block without comment" 2019-04-05 12:56:18 +02:00
ftplistparser.h
getenv.c
getinfo.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
getinfo.h
gopher.c gopher: remove check for path == NULL 2019-03-05 08:01:50 +01:00
gopher.h
hash.c
hash.h
hmac.c
hostasyn.c dns: release sharelock as soon as possible 2019-02-11 13:34:11 +01:00
hostcheck.c
hostcheck.h
hostip4.c
hostip6.c strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
hostip.c CURLOPT_DNS_USE_GLOBAL_CACHE: remove 2019-04-11 22:22:39 +02:00
hostip.h cleanup: make local functions static 2019-02-10 18:38:57 +01:00
hostsyn.c
http2.c pipelining: removed 2019-04-06 22:49:50 +02:00
http2.h cleanup: make local functions static 2019-02-10 18:38:57 +01:00
http_chunks.c
http_chunks.h
http_digest.c
http_digest.h
http_negotiate.c Negotiate: fix for HTTP POST with Negotiate 2019-03-14 09:26:03 +01:00
http_negotiate.h Negotiate: fix for HTTP POST with Negotiate 2019-03-14 09:26:03 +01:00
http_ntlm.c spnego_sspi: add support for channel binding 2019-02-01 09:56:27 +01:00
http_ntlm.h
http_proxy.c urldata: rename easy_conn to just conn 2019-01-11 15:35:13 +01:00
http_proxy.h
http.c pipelining: removed 2019-04-06 22:49:50 +02:00
http.h urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
idn_win32.c
if2ip.c build: fix Codacy/CppCheck warnings 2019-04-11 21:08:44 +02:00
if2ip.h if2ip: remove unused function Curl_if_is_interface_name 2018-12-21 10:46:05 +01:00
imap.c emailL Added reference to RFC8314 for implicit TLS 2019-04-11 01:19:15 +01:00
imap.h
inet_ntop.c
inet_ntop.h
inet_pton.c
inet_pton.h
krb5.c
ldap.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
libcurl.plist
libcurl.rc (lib)curl.rc: fixup for minor bugs 2018-12-10 00:10:04 +01:00
libcurl.vers.in
llist.c
llist.h
Makefile.am makefile: make checksrc and hugefile commands "silent" 2019-03-14 20:11:24 +01:00
makefile.amiga
makefile.dj
Makefile.inc pipelining: removed 2019-04-06 22:49:50 +02:00
Makefile.m32
Makefile.netware
Makefile.vxworks
Makefile.Watcom
md4.c checksrc: add COPYRIGHTYEAR check 2018-12-03 23:13:40 +01:00
md5.c build: fix Codacy/CppCheck warnings 2019-04-11 21:08:44 +02:00
memdebug.c memdebug: log pointer before freeing its data 2019-03-12 21:45:03 +01:00
memdebug.h memdebug: make debug-specific functions use curl_dbg_ prefix 2019-03-08 23:21:21 +01:00
mime.c mime: put the boundary buffer into the curl_mime struct 2019-02-12 22:55:32 +01:00
mime.h lib: Fix typos in comments 2019-03-22 11:39:03 +01:00
mk-ca-bundle.pl
mk-ca-bundle.vbs
mprintf.c
multi.c CURLOPT_DNS_USE_GLOBAL_CACHE: remove 2019-04-11 22:22:39 +02:00
multihandle.h pipelining: removed 2019-04-06 22:49:50 +02:00
multiif.h pipelining: removed 2019-04-06 22:49:50 +02:00
netrc.c
netrc.h
non-ascii.c non-ascii.c: fix typos in comments 2019-02-12 10:24:29 +01:00
non-ascii.h
nonblock.c
nonblock.h
nwlib.c
nwos.c
openldap.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
parsedate.c
parsedate.h
pingpong.c pingpong: ignore regular timeout in disconnect phase 2018-12-17 12:33:00 +01:00
pingpong.h pingpong: ignore regular timeout in disconnect phase 2018-12-17 12:33:00 +01:00
pop3.c emailL Added reference to RFC8314 for implicit TLS 2019-04-11 01:19:15 +01:00
pop3.h
progress.c
progress.h
psl.c
psl.h
rand.c
rand.h rand: Fix a mismatch between comments in source and header. 2019-02-18 23:13:30 +01:00
rtsp.c pipelining: removed 2019-04-06 22:49:50 +02:00
rtsp.h
security.c source: fix two 'nread' may be used uninitialized warnings 2019-03-05 13:03:43 +01:00
select.c
select.h
sendf.c pipelining: removed 2019-04-06 22:49:50 +02:00
sendf.h
setopt.c CURLOPT_DNS_USE_GLOBAL_CACHE: remove 2019-04-11 22:22:39 +02:00
setopt.h
setup-os400.h
setup-vms.h
sha256.c
share.c
share.h
sigpipe.h sigpipe: if mbedTLS is used, ignore SIGPIPE 2019-01-28 12:03:33 +01:00
slist.c
slist.h
smb.c smb: fix incorrect path in request if connection reused 2018-12-19 09:52:36 +01:00
smb.h
smtp.c emailL Added reference to RFC8314 for implicit TLS 2019-04-11 01:19:15 +01:00
smtp.h
sockaddr.h
socks_gssapi.c
socks_sspi.c strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
socks.c socks: fix error message 2019-04-08 23:30:53 +02:00
socks.h
speedcheck.c
speedcheck.h
splay.c
splay.h
ssh-libssh.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
ssh.c ssh: loop the state machine if not done and not blocking 2019-03-05 07:57:11 +01:00
ssh.h
strcase.c
strcase.h
strdup.c
strdup.h
strerror.c strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
strerror.h strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
strtok.c
strtok.h
strtoofft.c
strtoofft.h
system_win32.c system_win32: move win32_init here from easy.c 2019-03-02 01:49:48 -05:00
system_win32.h system_win32: move win32_init here from easy.c 2019-03-02 01:49:48 -05:00
telnet.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
telnet.h
tftp.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
tftp.h
timeval.c build: fix Codacy/CppCheck warnings 2019-04-11 21:08:44 +02:00
timeval.h printf: introduce CURL_FORMAT_TIMEDIFF_T 2019-01-04 23:51:13 +01:00
transfer.c pipelining: removed 2019-04-06 22:49:50 +02:00
transfer.h urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
url.c url: always clone the CUROPT_CURLU handle 2019-04-11 22:45:01 +02:00
url.h pipelining: removed 2019-04-06 22:49:50 +02:00
urlapi-int.h tests: add urlapi unittest 2018-12-11 15:02:24 +01:00
urlapi.c urlapi: stricter CURLUPART_PORT parsing 2019-04-13 11:17:30 +02:00
urldata.h CURLOPT_DNS_USE_GLOBAL_CACHE: remove 2019-04-11 22:22:39 +02:00
version.c build: fix Codacy/CppCheck warnings 2019-04-11 21:08:44 +02:00
warnless.c cleanup: make local functions static 2019-02-10 18:38:57 +01:00
warnless.h cleanup: make local functions static 2019-02-10 18:38:57 +01:00
wildcard.c
wildcard.h
x509asn1.c x509asn1: cleanup and unify code layout 2019-02-19 16:03:19 +01:00
x509asn1.h