curl/lib
Daniel Stenberg fa939220df
url: reject ASCII control characters and space in host names
Host names like "127.0.0.1 moo" would otherwise be accepted by some
getaddrinfo() implementations.

Updated test 1034 and 1035 accordingly.

Fixes #2073
Closes #2092
2017-11-22 11:14:06 +01:00
..
vauth ntlm: remove unnecessary NULL-check to please scan-build 2017-11-21 09:02:40 +01:00
vtls openssl: fix "Value stored to 'rc' is never read" scan-build error 2017-11-21 09:02:40 +01:00
.gitattributes
.gitignore
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
asyn-thread.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
asyn.h
base64.c
checksrc.pl checksrc: detect and warn for multiple spaces 2017-09-12 09:50:24 +02:00
CMakeLists.txt cmake: Export libcurl and curl targets to use by other cmake projects 2017-10-28 17:22:47 +02:00
config-amigaos.h
config-dos.h config-dos: add missing defines, SIZEOF_* and two others 2017-08-22 23:34:47 +02:00
config-mac.h
config-os400.h os400: add missing symbols in config file. 2017-10-19 18:48:21 +01:00
config-riscos.h
config-symbian.h
config-tpf.h config-tpf: define SIZEOF_LONG 2017-08-23 03:17:10 -04:00
config-vxworks.h
config-win32.h lib/config-win32.h: let SMB/SMBS be enabled with OpenSSL/NSS 2017-10-06 07:37:42 +00:00
config-win32ce.h config-win32: define SIZEOF_LONG 2017-08-22 02:24:09 -04:00
conncache.c share: add support for sharing the connection cache 2017-11-09 11:07:44 +01:00
conncache.h share: add support for sharing the connection cache 2017-11-09 11:07:44 +01:00
connect.c macOS: Fix missing connectx function with Xcode version older than 9.0 2017-11-15 11:10:51 +01:00
connect.h Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
content_encoding.c zlib/brotli: only include header files in modules needing them 2017-11-13 14:20:41 +01:00
content_encoding.h HTTP: support multiple Content-Encodings 2017-11-05 15:09:48 +01:00
cookie.c cookie: avoid NULL dereference 2017-10-31 09:16:03 +01:00
cookie.h cookies: reject oversized cookies 2017-09-18 22:55:50 +02:00
curl_addrinfo.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
curl_addrinfo.h
curl_base64.h
curl_config.h.cmake timeval: use mach time on MacOS 2017-10-30 15:27:46 +01:00
curl_des.c
curl_des.h
curl_endian.c
curl_endian.h
curl_fnmatch.c fnmatch: remove dead code 2017-11-06 09:01:53 +01:00
curl_fnmatch.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h
curl_hmac.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c
curl_multibyte.h
curl_ntlm_core.c ntlm: avoid malloc(0) for zero length passwords 2017-11-04 22:22:49 +01:00
curl_ntlm_core.h ntlm: move NTLM_NEEDS_NSS_INIT define into core NTLM header 2017-09-23 13:58:14 -04:00
curl_ntlm_wb.c ntlm: move NTLM_NEEDS_NSS_INIT define into core NTLM header 2017-09-23 13:58:14 -04:00
curl_ntlm_wb.h
curl_printf.h
curl_rtmp.c
curl_rtmp.h
curl_sasl.c Curl_base64_encode: always call with a real data handle. 2017-09-02 12:49:59 +01:00
curl_sasl.h
curl_sec.h
curl_setup_once.h
curl_setup.h curl_setup.h: oops, shorten the too long line 2017-10-27 11:12:45 +02:00
curl_sha256.h auth: add support for RFC7616 - HTTP Digest access authentication 2017-10-28 16:32:43 +02:00
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curlx.h curlx: the timeval functions are no longer provided as curlx_* 2017-10-30 16:41:44 +01:00
dict.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
dict.h
dotdot.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
dotdot.h
easy.c setopt: split out curl_easy_setopt() to its own file 2017-11-10 23:08:20 +01:00
easyif.h
escape.c escape.c: error: pointer targets differ in signedness 2017-09-15 16:56:23 +02:00
escape.h
file.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
file.h
fileinfo.c
fileinfo.h
firefox-db2pem.sh
formdata.c mime: keep "text/plain" content type if user-specified. 2017-10-12 19:36:16 +01:00
formdata.h mime: unified to use the typedef'd mime structs everywhere 2017-09-05 17:33:16 +01:00
ftp.c Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
ftp.h
ftplistparser.c ftplistparser: follow-up cleanup to remove PL_ERROR() 2017-10-25 18:45:14 +02:00
ftplistparser.h
getenv.c
getinfo.c getinfo: access SSL internals via Curl_ssl 2017-08-28 14:56:57 +02:00
getinfo.h
gopher.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
gopher.h
hash.c code style: use space after semicolon 2017-09-12 09:50:24 +02:00
hash.h
hmac.c
hostasyn.c resolvers: only include anything if needed 2017-10-27 13:20:13 +02:00
hostcheck.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
hostcheck.h
hostip4.c resolvers: only include anything if needed 2017-10-27 13:20:13 +02:00
hostip6.c resolvers: only include anything if needed 2017-10-27 13:20:13 +02:00
hostip.c resolve: allow IP address within [] brackets 2017-11-17 15:26:08 +01:00
hostip.h
hostsyn.c resolvers: only include anything if needed 2017-10-27 13:20:13 +02:00
http2.c http2: fix "Value stored to 'end' is never read" scan-build error 2017-11-21 09:02:41 +01:00
http2.h
http_chunks.c HTTP: support multiple Content-Encodings 2017-11-05 15:09:48 +01:00
http_chunks.h
http_digest.c
http_digest.h
http_negotiate.c
http_negotiate.h
http_ntlm.c ntlm: move NTLM_NEEDS_NSS_INIT define into core NTLM header 2017-09-23 13:58:14 -04:00
http_ntlm.h
http_proxy.c timeleft: made two more users of Curl_timeleft use timediff_t 2017-10-29 13:13:23 +01:00
http_proxy.h
http.c HTTP: support multiple Content-Encodings 2017-11-05 15:09:48 +01:00
http.h Curl_checkheaders: make it available for IMAP and SMTP too 2017-09-11 00:26:17 +02:00
idn_win32.c
if2ip.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
if2ip.h
imap.c imap: deal with commands case insensitively 2017-11-09 10:36:47 +01:00
imap.h imap: support PREAUTH 2017-08-23 23:58:49 +02:00
inet_ntop.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
inet_ntop.h
inet_pton.c
inet_pton.h
krb5.c
ldap.c ldap: silence clang warning 2017-10-15 15:59:43 +00:00
libcurl.plist
libcurl.rc
libcurl.vers.in
llist.c Curl_llist_remove: fix potential NULL pointer deref 2017-11-21 09:02:40 +01:00
llist.h
Makefile.am configure: remove --enable-soname-bump and SONAME_BUMP 2017-09-06 08:43:36 +02:00
makefile.amiga
Makefile.b32
makefile.dj
Makefile.inc setopt: split out curl_easy_setopt() to its own file 2017-11-10 23:08:20 +01:00
Makefile.m32 Makefile.m32: allow to customize brotli libs 2017-11-05 23:02:05 +00:00
Makefile.netware
Makefile.vxworks
Makefile.Watcom
md4.c
md5.c
memdebug.c memdebug: use send/recv signature for curl_dosend/curl_dorecv 2017-10-30 21:27:59 +01:00
memdebug.h memdebug: use send/recv signature for curl_dosend/curl_dorecv 2017-10-30 21:27:59 +01:00
mime.c mime: fix "Value stored to 'sz' is never read" scan-build error 2017-11-21 09:02:40 +01:00
mime.h mime: improve unbinding top multipart from easy handle. 2017-10-08 18:38:34 +01:00
mk-ca-bundle.pl mk-ca-bundle: Remove URL for aurora 2017-10-22 23:38:31 +02:00
mk-ca-bundle.vbs
mprintf.c code style: remove wrong uses of multiple spaces 2017-09-12 13:54:54 +02:00
multi.c share: add support for sharing the connection cache 2017-11-09 11:07:44 +01:00
multihandle.h share: add support for sharing the connection cache 2017-11-09 11:07:44 +01:00
multiif.h
netrc.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
netrc.h
non-ascii.c non-ascii: use iconv() with 'char **' argument 2017-09-15 16:56:23 +02:00
non-ascii.h mime: new MIME API. 2017-09-02 17:47:10 +01:00
nonblock.c
nonblock.h
nwlib.c
nwos.c
objnames-test08.sh
objnames-test10.sh
objnames.inc
openldap.c memdebug: trace send, recv and socket 2017-10-14 17:40:12 +02:00
parsedate.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
parsedate.h
pingpong.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
pingpong.h time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
pipeline.c
pipeline.h
pop3.c
pop3.h
progress.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
progress.h
rand.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
rand.h
rtsp.c rtsp: Segfault in rtsp.c when using WRITEDATA 2017-09-15 15:43:48 +02:00
rtsp.h
security.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
select.c select: update comments 2017-10-30 16:40:28 +01:00
select.h
sendf.c failf: skip the sprintf() if there are no consumers 2017-10-04 14:48:06 +02:00
sendf.h
setopt.c setopt: split out curl_easy_setopt() to its own file 2017-11-10 23:08:20 +01:00
setopt.h setopt: split out curl_easy_setopt() to its own file 2017-11-10 23:08:20 +01:00
setup-os400.h
setup-vms.h
sha256.c auth: add support for RFC7616 - HTTP Digest access authentication 2017-10-28 16:32:43 +02:00
share.c curl_share_setopt: va_end was not called if conncache errors 2017-11-10 15:02:11 +01:00
share.h share: add support for sharing the connection cache 2017-11-09 11:07:44 +01:00
sigpipe.h
slist.c
slist.h
smb.c SMB: fix uninitialized local variable 2017-11-13 08:27:36 +01:00
smb.h
smtp.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
smtp.h
sockaddr.h
socks_gssapi.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
socks_sspi.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
socks.c Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
socks.h
speedcheck.c timediff: return timediff_t from the time diff functions 2017-10-25 09:54:37 +02:00
speedcheck.h
splay.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
splay.h code style: remove wrong uses of multiple spaces 2017-09-12 13:54:54 +02:00
ssh.c Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
ssh.h
strcase.c strcase: corrected comment header for Curl_strcasecompare() 2017-08-31 11:37:36 +02:00
strcase.h
strdup.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
strdup.h
strerror.c
strerror.h
strtok.c
strtok.h
strtoofft.c strtoofft: Remove extraneous null check 2017-10-06 14:49:28 +02:00
strtoofft.h
system_win32.c
system_win32.h
telnet.c time: rename Curl_tvnow to Curl_now 2017-10-25 18:48:05 +02:00
telnet.h
tftp.c Curl_timeleft: change return type to timediff_t 2017-10-28 10:40:51 +02:00
tftp.h
timeval.c timeval: use mach time on MacOS 2017-10-30 15:27:46 +01:00
timeval.h timeval: make timediff_t also work on 32bit windows 2017-10-26 20:22:55 +02:00
transfer.c HTTP: support multiple Content-Encodings 2017-11-05 15:09:48 +01:00
transfer.h Curl_checkheaders: make it available for IMAP and SMTP too 2017-09-11 00:26:17 +02:00
url.c url: reject ASCII control characters and space in host names 2017-11-22 11:14:06 +01:00
url.h setopt: split out curl_easy_setopt() to its own file 2017-11-10 23:08:20 +01:00
urldata.h zlib/brotli: only include header files in modules needing them 2017-11-13 14:20:41 +01:00
version.c zlib/brotli: only include header files in modules needing them 2017-11-13 14:20:41 +01:00
warnless.c CURL_SIZEOF_LONG: removed, use only SIZEOF_LONG 2017-08-17 10:27:00 +02:00
warnless.h
wildcard.c
wildcard.h
x509asn1.c
x509asn1.h