curl/lib
Steve Holme e655ae0c80 curl_sasl: Fixed potential null pointer utilisation
Although this should never happen due to the relationship between the
'mech' and 'resp' variables, and the way they are allocated together,
it does cause problems for code analysis tools:

V595 The 'mech' pointer was utilized before it was verified against
     nullptr. Check lines: 376, 381. curl_sasl.c 376

Bug: https://github.com/curl/curl/issues/745
Reported-by: Alexis La Goutte
2016-04-03 17:55:17 +01:00
..
vauth spnego: Small code tidy up 2016-04-03 17:32:10 +01:00
vtls openssl: Fix compilation warnings 2016-03-30 23:55:00 +01:00
.gitignore
amigaos.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
amigaos.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
arpa_telnet.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
asyn-ares.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
asyn-thread.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
asyn.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
base64.c base64: Minor coding standard and style updates 2016-03-13 17:59:06 +00:00
checksrc.pl checksrc: improve the fopen() parser somewhat 2016-04-03 11:29:14 +02:00
checksrc.whitelist checksrc.whitelist: remove fopen() uses 2016-04-03 11:57:21 +02:00
CMakeLists.txt
config-amigaos.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-dos.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-mac.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-os400.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-riscos.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-symbian.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-tpf.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-vxworks.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
config-win32.h config-w32.h: Fixed compilation warning when /Wall enabled 2016-03-19 11:05:06 +00:00
config-win32ce.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
conncache.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
conncache.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
connect.c connect/ntlm/http: Fixed compilation warnings when verbose strings disabled 2016-03-20 17:51:06 +00:00
connect.h URLs: change more http to https 2016-02-04 18:46:54 -05:00
content_encoding.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
content_encoding.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
cookie.c cookies: first n/v pair in Set-Cookie: is the cookie, then parameters 2016-03-10 11:26:12 +01:00
cookie.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_addrinfo.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_addrinfo.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_base64.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_config.h.cmake
curl_des.c openssl: remove most BoringSSL #ifdefs. 2016-02-09 08:46:36 +01:00
curl_des.h openssl: remove most BoringSSL #ifdefs. 2016-02-09 08:46:36 +01:00
curl_endian.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_endian.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_fnmatch.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
curl_fnmatch.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_gethostname.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_gethostname.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_gssapi.c GSS: make Curl_gss_log_error more verbose 2016-03-29 16:51:29 +02:00
curl_gssapi.h GSS: make Curl_gss_log_error more verbose 2016-03-29 16:51:29 +02:00
curl_hmac.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_ldap.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_md4.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_md5.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_memory.h curl_memory.h: Fixed typo in comment 2016-04-01 19:12:39 +01:00
curl_memrchr.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
curl_memrchr.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_multibyte.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_multibyte.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_ntlm_core.c openssl: remove most BoringSSL #ifdefs. 2016-02-09 08:46:36 +01:00
curl_ntlm_core.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_ntlm_wb.c vauth: Moved the NTLM authentication code to the new vauth directory 2016-03-25 15:11:09 +00:00
curl_ntlm_wb.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_printf.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_rtmp.c URLs: change more http to https 2016-02-04 18:46:54 -05:00
curl_rtmp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_sasl.c curl_sasl: Fixed potential null pointer utilisation 2016-04-03 17:55:17 +01:00
curl_sasl.h vauth: Moved the NTLM authentication code to the new vauth directory 2016-03-25 15:11:09 +00:00
curl_sec.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_setup_once.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_setup.h openssl: remove most BoringSSL #ifdefs. 2016-02-09 08:46:36 +01:00
curl_sspi.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_sspi.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curl_threads.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
curl_threads.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
curlx.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
dict.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
dict.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
dotdot.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
dotdot.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
easy.c easy: Minor coding standard and style updates 2016-03-19 20:37:12 +00:00
easyif.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
escape.c URLs: change more http to https 2016-02-04 18:46:54 -05:00
escape.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
file.c file: remove duplicate checks of the same variable 2016-03-31 10:10:58 +02:00
file.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
fileinfo.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
fileinfo.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
firefox-db2pem.sh URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
formdata.c formdata: use appropriate fopen() macros 2016-04-03 11:57:04 +02:00
formdata.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
ftp.c multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
ftp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
ftplistparser.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
ftplistparser.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
getenv.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
getinfo.c getinfo: Fix syntax error when mbedTLS 2016-02-28 16:05:38 -05:00
getinfo.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
gopher.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
gopher.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hash.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
hash.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hmac.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
hostasyn.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hostcheck.c URLs: change more http to https 2016-02-04 18:46:54 -05:00
hostcheck.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hostip4.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hostip6.c hostip6: Fixed compilation warnings when verbose strings disabled 2016-03-22 06:16:06 +00:00
hostip.c hostip.c: minor white space edit for style 2016-03-29 15:19:21 +02:00
hostip.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
hostsyn.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http2.c http2: make use of the nghttp2 error callback 2016-04-02 16:27:30 +02:00
http2.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http_chunks.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http_chunks.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http_digest.c vauth: Refactored function names after move to new vauth directory 2016-03-25 17:40:12 +00:00
http_digest.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http_negotiate.c http_negotiate: Corrected host and proxy host name being wrong way round 2016-04-01 21:48:35 +01:00
http_negotiate.h vauth: Moved the Negotiate authentication code to the new vauth directory 2016-03-26 17:21:22 +00:00
http_ntlm.c http_ntlm: Renamed from curl_ntlm.[c|h] 2016-03-27 17:58:50 +01:00
http_ntlm.h http_ntlm: Renamed from curl_ntlm.[c|h] 2016-03-27 17:58:50 +01:00
http_proxy.c Proxy-Connection: stop sending this header by default 2016-02-08 11:09:40 +01:00
http_proxy.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
http.c http2: support "prior knowledge", no upgrade from HTTP/1.1 2016-03-31 22:23:11 +02:00
http.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
idn_win32.c idn_win32: Use boolean based success codes 2016-03-11 07:24:39 +00:00
if2ip.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
if2ip.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
imap.c IMAP: check pointer before dereferencing it 2016-04-01 21:18:46 +02:00
imap.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
inet_ntop.c
inet_ntop.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
inet_pton.c inet_pton.c: Fixed compilation warnings 2016-03-20 11:14:58 +00:00
inet_pton.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
krb5.c krb5: improved type handling to avoid clang compiler warnings 2016-03-10 10:40:10 +01:00
ldap.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
libcurl.def URLs: Change more haxx.se URLs from http: to https: 2016-02-03 01:45:21 +01:00
libcurl.plist
libcurl.rc URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
libcurl.vers.in
llist.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
llist.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
Makefile.am URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
makefile.amiga
Makefile.b32 build: Updated all makefiles and project files for the new vauth directory 2016-03-25 09:11:59 +00:00
makefile.dj URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
Makefile.inc http_ntlm: Renamed from curl_ntlm.[c|h] 2016-03-27 17:58:50 +01:00
Makefile.m32 makefile.m32: add missing libs for static -winssl-ssh2 builds 2016-03-05 21:50:12 -05:00
Makefile.netware build: Updated all makefiles and project files for the new vauth directory 2016-03-25 09:11:59 +00:00
Makefile.vc6 http_ntlm: Renamed from curl_ntlm.[c|h] 2016-03-27 17:58:50 +01:00
Makefile.vxworks
Makefile.Watcom build: Updated all makefiles and project files for the new vauth directory 2016-03-25 09:11:59 +00:00
md4.c
md5.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
memdebug.c memdebug: skip logging the limit countdown, fflush when reached 2016-03-14 15:36:40 +01:00
memdebug.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
mk-ca-bundle.pl URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
mk-ca-bundle.vbs URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
mprintf.c curl/mprintf.h: remove support for _MPRINTF_REPLACE 2016-04-01 10:46:36 +02:00
multi.c multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
multihandle.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
multiif.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
netrc.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
netrc.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
non-ascii.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
non-ascii.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
nonblock.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
nonblock.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
nwlib.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
nwos.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
objnames-test08.sh URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
objnames-test10.sh URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
objnames.inc URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
openldap.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
parsedate.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
parsedate.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
pingpong.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
pingpong.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
pipeline.c pipeline: Sanity check pipeline pointer before accessing it. 2016-03-08 00:25:53 +01:00
pipeline.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
pop3.c multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
pop3.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
progress.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
progress.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
rawstr.c URLs: Change more haxx.se URLs from http: to https: 2016-02-03 01:45:21 +01:00
rawstr.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
rtsp.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
rtsp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
security.c
select.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
select.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
sendf.c Curl_read: check for activated HTTP/1 pipelining, not only requested 2016-02-24 14:20:57 +01:00
sendf.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
setup-os400.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
setup-vms.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
share.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
share.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
sigpipe.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
slist.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
slist.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
smb.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
smb.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
smtp.c multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
smtp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
sockaddr.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
socks_gssapi.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
socks_sspi.c SOCKS5_gssapi_negotiate: don't assume little-endian ints 2016-03-31 10:22:42 +02:00
socks.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
socks.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
speedcheck.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
speedcheck.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
splay.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
splay.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
ssh.c multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
ssh.h SSH: new CURLOPT_QUOTE command "statvfs" 2016-03-27 17:52:16 +02:00
strdup.c memdebug: Ensure curl/curl.h is included before curl_memory.h 2016-04-01 13:21:12 +01:00
strdup.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strequal.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strequal.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strerror.c strerror: don't bit shift a signed integer 2016-03-31 21:05:29 -04:00
strerror.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strtok.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strtok.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strtoofft.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
strtoofft.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
telnet.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
telnet.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tftp.c TFTP: add option to suppress TFTP option requests (Part 2) 2016-02-23 03:01:07 -05:00
tftp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
timeval.c curlx_tvdiff: handle 32bit time_t overflows 2016-02-12 08:13:03 +01:00
timeval.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
transfer.c upload: missing rewind call could make libcurl hang 2016-04-01 13:57:15 +02:00
transfer.h multi: multi_reconnect_request is the former Curl_reconnect_request 2016-03-30 07:52:28 +02:00
url.c url: Corrected get protocol family for FTP and LDAP 2016-04-01 07:24:39 +01:00
url.h multi: turn Curl_done into file local multi_done 2016-03-30 07:52:28 +02:00
urldata.h spnego: Renamed the context's SPN variable 2016-04-02 06:41:29 +01:00
version.c version: init moved to private name space, added protos 2016-03-17 00:55:46 +01:00
warnless.c warnless?: Added some integer based conversion functions 2016-03-26 11:09:01 +00:00
warnless.h warnless.h: Removed spurious character from commit 696bc6b9c9 2016-03-26 11:35:07 +00:00
wildcard.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
wildcard.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
x509asn1.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
x509asn1.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00