Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10000 commits
Select commit Hold shift + click to select a range
9d94b1a
docs: use dot instead of comma at end of sentences
diogotcorreia Feb 24, 2026
956e1ae
setopt: refuse blobs with zero length
bagder Feb 24, 2026
7981594
mbedtls: split mbed_connect_step1 into sub functions
bagder Feb 23, 2026
ba685ad
openssl: fix potential NULL dereference when loading certs (Windows)
vszakats Feb 19, 2026
6ef6fb8
top-complexity: lower the max allowed complexity to 60
bagder Feb 24, 2026
704a0a3
config-riscos.h: drop all undefs
bagder Feb 24, 2026
c513b1d
DEPRECATE.md: TLS SRP support gets removed in August 2026
bagder Feb 23, 2026
be2499f
managen: silence Perl warnings
vszakats Feb 24, 2026
102d4c8
tidy-up: macro parentheses
vszakats Feb 15, 2026
3e198f7
build: fix building rare combinations
vszakats Feb 24, 2026
a4ce687
docs: add reproducible example for generating man page
benslimanh Feb 24, 2026
baf32a5
build: enable `-Wjump-misses-init` for clang 21+
vszakats Feb 25, 2026
92eddc1
build: map Apple clang 26.4+ to llvm/clang 21.1
vszakats Feb 25, 2026
86772a7
RELEASE-NOTES: synced
bagder Feb 25, 2026
ac46392
clang-tidy: enable `bugprone-signed-char-misuse`, fix fallouts
vszakats Feb 18, 2026
af78b19
tidy-up: miscellaneous
vszakats Feb 13, 2026
65f9426
clang-tidy: enable more checks
vszakats Feb 18, 2026
3b9d841
clang-tidy: add more missing parentheses in macro values
vszakats Feb 25, 2026
39542f0
cmake: add native clang-tidy support for tests, with concatenated sou…
vszakats Feb 21, 2026
725c560
clang-tidy: avoid/silence `bugprone-not-null-terminated-result`
vszakats Feb 25, 2026
3137f72
cmake: fix passing system header directories to clang-tidy for tests
vszakats Feb 25, 2026
aae3612
cmake: replace internal option with a new `testbins` target
vszakats Feb 24, 2026
b56e103
build: do not include wolfSSL header in `curl_setup.h`
vszakats Feb 25, 2026
2239879
cmake: minor fixes to test targets after prev
vszakats Feb 26, 2026
d110504
build: add missing `GENERATEDCERTS` files
vszakats Feb 26, 2026
d38bf79
tests/server: fix to clear the complete `srvr_sockaddr_union_t` variable
vszakats Feb 26, 2026
b1f853a
unit3205: suppress two clang-tidy false positives
vszakats Feb 26, 2026
137e87c
clang-tidy: enable scanning headers
vszakats Feb 25, 2026
26eddf0
GHA/linux: switch clang-tidy job to cmake for 2x speed, bump to v20, …
vszakats Feb 25, 2026
3cf8650
VULN-DISCLOSURE-POLICY.md: use hackerone
bagder Feb 23, 2026
4a43eba
cmake: silence potential unused var warnings in C++ test snippet
vszakats Feb 26, 2026
dc4aef7
GHA/macos: update comment about macOS targets vs. features
vszakats Feb 26, 2026
9b52d51
GHA/linux: bump sanitizer jobs to clang v20 (from v18)
vszakats Feb 26, 2026
6789eb0
multi: avoid a theoretical 32-bit wrap
bagder Feb 26, 2026
e866429
GHA: update ngtcp2/ngtcp2 to v1.21.0
renovate[bot] Feb 26, 2026
05d991a
rtsp: fix assertion failure on zero-length RTP payload
benslimanh Feb 26, 2026
9871f46
GHA/macos: drop unused `install_step` values [ci skip]
vszakats Feb 26, 2026
ad72af4
GHA/linux: enable clang-tidy for docs/examples
vszakats Feb 26, 2026
b3f1f69
GHA/macos: bump runner to macos-26 in clang-tidy jobs
vszakats Feb 26, 2026
c111275
GHA/linux: delete unused autotools clang-tidy logic
vszakats Feb 26, 2026
fb58b23
cmake: fix confusing error when a dependency is undetected in `curl-c…
vszakats Feb 26, 2026
8d28ac6
mailmap: Hamza Bensliman
bagder Feb 26, 2026
f76a54f
clang-tidy: add missing and delete redundant parentheses
vszakats Feb 26, 2026
b2076d3
vquic: fix unused variable warning reported by clang-tidy
vszakats Feb 27, 2026
b48d021
ftp: remove two redundant assignments
bagder Feb 27, 2026
61bcd11
cfilter: move a debug-only check into ifdef DEBUGBUILD
bagder Feb 27, 2026
a67ee59
RELEASE-NOTES: synced
bagder Feb 27, 2026
d9386a2
cmake: fix system include directory position for clang-tidy in tests
vszakats Feb 27, 2026
ce4db9c
GHA/linux: replace scan-build with clang-tidy
vszakats Feb 27, 2026
9d727e4
cmake: replace `list(FIND)` with `if(var IN_LIST list)`
vszakats Feb 27, 2026
00b215b
cmake: convert `curl_add_clang_tidy_test_target()` macro to function
vszakats Feb 27, 2026
fa8bd1c
mprintf: use `_snprintf()` when compiled with VS2013 and older
vszakats Feb 26, 2026
7a08c5d
ldap: silence clang-tidy v22 warning
vszakats Feb 27, 2026
92f66f0
appveyor: minor improvements [ci skip]
vszakats Feb 26, 2026
aea5552
INSTALL.md: fix typo
bagder Feb 27, 2026
006f561
docs: some nitpicks
ffflorian Feb 26, 2026
bcc8144
clang-tidy: silence more minor issues found by v22
vszakats Feb 28, 2026
35bbb2e
clang-tidy: fix issues found with build-fuzzing
vszakats Feb 28, 2026
7a80082
GHA/windows: bump clang-tidy job to clang v20 (from v18)
vszakats Feb 28, 2026
1b35c9e
cmake: rename `testbins` target to `tt`, restore internal option
vszakats Feb 28, 2026
4427e61
GHA: bump actions and pip dependencies
dependabot[bot] Mar 1, 2026
99bd5ed
HISTORY: mention that Rafael passed away much too early
bagder Mar 1, 2026
d680789
test1637: verify --fail and --retry with 502 response code
bagder Mar 1, 2026
7fe5b93
TODO: drop the alt-svc fallback
bagder Mar 2, 2026
da6fbb1
http1: fix potential NULL dereference in `Curl_h1_req_parse_read()`
vszakats Mar 1, 2026
7a77884
clang-tidy: enable `clang-analyzer-*` checks explicitly, fix fallout
vszakats Mar 1, 2026
fcde8d7
cmake: minor improvements to integration test framework
vszakats Feb 28, 2026
a5c6a40
clang-tidy: fix `readability-suspicious-call-argument`
vszakats Feb 18, 2026
b83ade7
multi: fix unreachable code compiler warning
vszakats Feb 28, 2026
64f28b8
curlx: add local `snprintf()` helper that always nul-terminates (Wind…
vszakats Feb 27, 2026
30ec220
mprintf: silence clang-tidy `readability-suspicious-call-argument`
vszakats Mar 2, 2026
d557c06
build: drop unused `snprintf()` feature check on Windows
vszakats Mar 2, 2026
3aa6389
mbedtls: guard TLS 1.3 + session tickets usage inside ifdef
DanielDiazOrion Feb 27, 2026
86a2a6b
cmake: stop disabling C4774 after replacing `snprintf()`, update comm…
vszakats Mar 2, 2026
4b583b7
Dockerfile: update debian:bookworm-slim digest to 74d56e3
renovate[bot] Feb 24, 2026
b4dba34
stop using the word 'just'
bagder Mar 2, 2026
cc85cdf
docs: avoid using the word 'magic'
bagder Mar 3, 2026
3d708e2
urlapi: use U_CURLU_URLDECODE when toggling it off unsigned
bagder Feb 28, 2026
91e06fd
cmake: fix building with `CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON`
vszakats Mar 1, 2026
d9c2c64
openssl: adapt to OpenSSL master adding const to more APIs
bagder Mar 3, 2026
7577ed7
schannel: fix UAF in client cert store thumbprint handling
bagder Mar 3, 2026
3d4a701
config2setopts: restore proper ignoring of CAINFO BLOB option errors
bagder Mar 3, 2026
ad58e07
curl.h: remove CURLPROTO_MQTTS from the public header
bagder Mar 3, 2026
7079f1d
usercertinmem: use the correct cert BIO
bagder Mar 3, 2026
38ee353
examples: improve OpenSSL certificate examples
vszakats Mar 3, 2026
70ec113
socks: ensure DNS is freed in failure cases.
cmeister2 Mar 4, 2026
0742fd5
cmake: mark two internal options as advanced
vszakats Mar 5, 2026
3a2fdeb
unit3205: drop `NOLINT`
vszakats Mar 4, 2026
37f5e39
spelling: bump codespell to 2.4.2, fix fallouts
vszakats Mar 5, 2026
c6cfb2a
cmake: fix `LOCATION` property read errors in target debug function
vszakats Mar 6, 2026
009facd
cmake: improve clang-tidy test command-line reproduction
vszakats Mar 6, 2026
9a3afc1
cmake: fix `LOCATION` property access condition (debug)
vszakats Mar 6, 2026
bfb79de
urldata: byebye `conn->hostname_resolve`
icing Mar 6, 2026
b803dc9
async-ares: blocking resolve timeout handling, better
icing Mar 5, 2026
3c007d6
openssl+ech: workaround for insecure handshakes
icing Mar 5, 2026
933c34e
tool_operate: reset the URL --url-query between --next
bagder Mar 3, 2026
d7e4473
tool_doswin: avoid memory-leak with CURL_FN_SANITIZE_*
bagder Mar 3, 2026
27c3e08
content_encoding: return 'identity' if none other exists
bagder Mar 3, 2026
e49efce
synctime: fix use of uninitialized buffer on non-Windows
bagder Mar 3, 2026
e47b6e6
socketpair: clear 'err' when retrying due to EINTR
bagder Mar 3, 2026
5f13a76
proxy-auth: additional tests
icing Mar 6, 2026
704e7a8
mqtt: fix EOF handling
icing Mar 6, 2026
86ea3ab
FAQ: syntax improvements
rybak Mar 4, 2026
1495489
docs: drop basically
bagder Mar 6, 2026
e3d7401
http: only send bearer if auth is allowed
bagder Mar 6, 2026
08d6497
cf-socket: ignore SOCK_CLOEXEC etc for socktype equality checks
bagder Mar 7, 2026
b351fd1
test1849: reuse a proxy with different credentials
bagder Mar 6, 2026
2f8fe96
tests/FILEFORMAT.md: the <server> section is NOT mandatory
bagder Mar 7, 2026
f180818
DEPRECATE.md: SMB and NTLM become build-time opt-in
bagder Mar 7, 2026
6b552e6
quiche: use PRIu64 for outputting the stream id
bagder Mar 7, 2026
13f48df
docs: avoid starting sentences with However,
bagder Mar 6, 2026
9a674ee
docs: replace instances of the vague qualifier 'quite'
dbalsom Mar 6, 2026
64d4f5c
system_win32: replace manual init code with `curlx_now_init()` call
vszakats Mar 8, 2026
22b0cbe
tests/server: drop unused `curlx/version_win32.c`
vszakats Mar 8, 2026
e090be9
smb: free the path in the request struct properly
icing Mar 8, 2026
1f8cfa0
test1850: verify the SMB request path use for two transfers
bagder Mar 8, 2026
4a15bc1
RELEASE-NOTES: synced
bagder Mar 8, 2026
cbb5544
digest: fix memory leak in auth_create_digest_http_message()
huanghuihui0904 Mar 9, 2026
ccba492
tidy-up: miscellaneous
vszakats Feb 26, 2026
6a68264
windows: determine `RtlVerifyVersionInfo` address on global init
vszakats Mar 8, 2026
6a09f2e
config-win32.h: merge two `#if` branches
vszakats Mar 8, 2026
d709599
GHA/windows: pass preprocessor flags via `CPPFLAGS`
vszakats Mar 8, 2026
4cad71d
configure: drop always true `if` check (Windows)
vszakats Mar 8, 2026
05189f5
rand: drop impossible preprocessor branches (wincrypt)
vszakats Mar 8, 2026
716dc8c
rand: drop scan-build silencer
vszakats Mar 8, 2026
f684057
THANKS-filter: update with a new entry
vszakats Mar 9, 2026
df5c6b6
docs: handle error in `curl_global_init*` examples
vszakats Mar 9, 2026
248dd9e
x509asn1: make encodeOID stop on too long input
bagder Mar 9, 2026
7132871
badwords: move into ./scripts, speed up
bagder Mar 9, 2026
8ec0e1e
docs: fixup wording nits
bagder Mar 9, 2026
c1cea52
badwords: twice as fast
icing Mar 10, 2026
a4f9096
GHA: update awslabs/aws-lc to v1.69.0
renovate[bot] Mar 10, 2026
ed7bf43
BUG-BOUNTY.md: minor rephrase to say there is no bug bounty
bagder Mar 10, 2026
d4a0686
spacecheck: find double newlines in `tests/data/test*`
vszakats Mar 9, 2026
3b43b90
badwords: dedupe invocation into a runnable script
vszakats Mar 10, 2026
15932f2
GHA: drop installing impacket for curl built without SMB support
vszakats Mar 9, 2026
4021c6e
badwords: fix showing alternative for case-insensitive hits
vszakats Mar 10, 2026
f251243
badwords: avoid 'simply'
felipedmesquita Mar 5, 2026
18e8c9f
FAQ.md: point codeproject.com URL to archive.org copy
vszakats Mar 11, 2026
3fd0d77
THANKS: add contributors from 8.19.0 release
bagder Mar 11, 2026
7a73be1
VERSIONS: add 8.19.0
bagder Mar 11, 2026
8c908d2
RELEASE-NOTES: synced
bagder Mar 11, 2026
2e52a57
badwords: combine the whitelisting into a single regex
bagder Mar 10, 2026
1a4d392
docs: minor wording tweaks
bagder Mar 10, 2026
a221e2f
RELEASE-NOTES: synced
bagder Mar 11, 2026
53a3b21
libssh2: fix error handling on quote errors
bagder Mar 11, 2026
015f1c7
hostip: clear the sockaddr_in6 structure before use
vlmarek Mar 11, 2026
da7bfb8
connection_check, simplified
icing Mar 11, 2026
f14ce01
pingpong: cleanup timeleft handling
icing Mar 11, 2026
5fc7d50
vtls: ECH definitions cleanup
icing Mar 11, 2026
11c14b5
urlapi: verify the last letter of a scheme when set explictly
bagder Mar 11, 2026
435eabe
badwords: rework exceptions, fix many of them
vszakats Mar 11, 2026
5673985
examples: drop warning silencers no longer hit
vszakats Mar 11, 2026
a0db675
build: hook up badwords check to lint targets
vszakats Mar 11, 2026
6ada2e3
autotools: limit checksrc target to ignore non-repo test sources
vszakats Mar 12, 2026
2938cb7
http: fix Curl_compareheader for multi value headers
bagder Mar 11, 2026
c0f17de
hostip: remove two zero assigns after memset clear
bagder Mar 12, 2026
ed7bfcd
test1625: unit test for Curl_compareheader
bagder Mar 12, 2026
133b125
http: make Curl_compareheader handle multiple commas in header
bagder Mar 12, 2026
7a4fa90
openssl: trace count of found / imported Windows native CA roots
vszakats Mar 12, 2026
9148862
test1626: Curl_copy_header_value unit test
bagder Mar 12, 2026
143279f
test1627: Curl_get_scheme unit test
bagder Mar 12, 2026
d20fa5c
test459: switch to mode="warn" for stderr check
bagder Mar 12, 2026
210d8ec
build: compiler warning silencing tidy-ups
vszakats Mar 12, 2026
666db80
configure: fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
vszakats Mar 11, 2026
510efa0
HTTP3.md: drop outdated mentions of OpenSSL-QUIC
bagder Mar 12, 2026
c2f36b6
RELEASE-NOTES: synced
bagder Mar 12, 2026
2b3438d
tool_cfgable: free the SSL signature algorithms
bagder Mar 12, 2026
6870803
badwords: only check comments and strings in source code
bagder Mar 12, 2026
a254b8c
RELEASE-NOTES: fix typo
bagder Mar 13, 2026
eb5af3a
GHA: make typos ignore RELEASE-NOTES
bagder Mar 13, 2026
412cd25
urldata: connection bit ipv6_ip is wrong
icing Mar 13, 2026
dfadec7
os400sys: fix typo in comment (symetry -> symmetry)
crawfordxx Mar 15, 2026
9325eb5
urldata: import port types and conn destination format
icing Mar 13, 2026
f50446f
lib: keepon improving
icing Mar 12, 2026
32531f2
doh: fix memory-leak when doing a second DoH resolve
bagder Mar 15, 2026
eb14705
protocol source, all about protocols and uri schemes
icing Mar 12, 2026
594a927
docs/lib: fix typos
md42 Mar 16, 2026
0cd0e19
url: use URL for url even in comments
bagder Mar 16, 2026
b240c52
badwords: detect the the and with with
bagder Mar 16, 2026
3334fca
badwords-all: exit with correct code on errors
bagder Mar 16, 2026
6b0a885
ldap: fix to initialize cleartext connection on Windows
vszakats Mar 15, 2026
04d90b5
configure: add option to trace pkg-config detection details
vszakats Mar 15, 2026
6d87eb2
cmake: add `CURL_GCC_ANALYZER` option, enable in CI, fix/silence
vszakats Mar 13, 2026
e76968e
curl_get_line: fix potential infinite loop when filename is a directory
vszakats Mar 10, 2026
fad1eba
cmake: resolve imported targets recursively when generating `libcurl.pc`
vszakats Mar 6, 2026
ca92e20
mk-ca-bundle.pl: make generated timestamps deterministic
vszakats Feb 5, 2026
030d6ae
build: include curlx headers directly in src and tests
vszakats Feb 28, 2026
9d104f5
ldap: drop duplicate `ldap_set_option()` on Windows
vszakats Mar 15, 2026
0793c98
cmake: rework binutils ld hack to not read `LOCATION` property
vszakats Mar 6, 2026
3525ed9
ECH.md: replace double-backticks with single ones
vszakats Mar 16, 2026
29cb750
tool_cb_wrt: fix no-clobber error handling
bagder Mar 16, 2026
ec3f198
GHA/http3-linux: prefer `contains()` over `==` in job name filters
vszakats Mar 16, 2026
b317506
configure: also trace two important pkg-config envs
vszakats Mar 16, 2026
3ba48ee
curl-wolfssl.m4: fix to use the correct value for pkg-config directory
vszakats Mar 16, 2026
8423cc8
configure: prefer dependency-specific variables over `$withval`
vszakats Mar 16, 2026
3e8df37
digest: pass in the user name quoted (as well)
bagder Mar 16, 2026
e05cfd6
build: drop `openssl` module dependency for BoringSSL from `libcurl.pc`
vszakats Mar 16, 2026
1e3c2be
GHA/http3-linux: add CI reproducer for `--with-ngtcp2=<path>` regression
vszakats Mar 15, 2026
b98981e
url: don't assume all transfers have hostnames
bagder Mar 17, 2026
32500f1
HTTP3.md: minor improvements
vszakats Mar 16, 2026
2e2d021
ftp: do not strdup DATA hostname
icing Mar 17, 2026
fa5d2cc
curl_ctype.h: fix spelling in a couple of locally used macros
flavioamieiro Mar 4, 2026
3e74a3e
openssl: drop obsolete SSLv2 logic
vszakats Mar 16, 2026
38107d3
configure: fix `--with-ngtcp2=<path>` option for crypto libs
vszakats Mar 13, 2026
e894699
strerr: correct the strerror_s() return code condition
bagder Mar 17, 2026
b881bc0
Dockerfile: update debian:bookworm-slim Docker digest to f065376
renovate[bot] Mar 16, 2026
90b9f51
tool_operate: fix minor memory-leak on early error
bagder Mar 17, 2026
91b422d
pytest: add additional quiche check for flaky test_05_01
icing Mar 17, 2026
1098e10
tool_urlglob: fix memory-leak on glob range overflow
bagder Mar 17, 2026
aeee5dd
connection bits: move 'connect_only' here
icing Mar 17, 2026
f1a5343
urldata: remove trailers_state
icing Mar 17, 2026
f4c0590
tool_ipfs: accept IPFS gateway URL without set port number
bagder Mar 17, 2026
adda113
transfer: enhance secure check
icing Mar 17, 2026
ae09e5b
curl_get_line: error out on read errors
bagder Mar 17, 2026
a46816b
imap: reset the UIDVALIDITY state between transfers
bagder Mar 17, 2026
a327a5b
netrc: refactor into smaller sub functions
bagder Mar 9, 2026
cc56041
RELEASE-NOTES: synced
bagder Mar 17, 2026
650546f
cmake: document functions used from Windows system DLLs
vszakats Mar 17, 2026
0d7677a
generate.bat: remove extra % from VC11 and VC12 runs
bagder Mar 17, 2026
80b6cd9
tool_formparse: propagate my_get_line errors when reading headers
bagder Mar 17, 2026
b11f43a
top-complexity: prevent filename-based shell injection risk
bagder Mar 17, 2026
02e04ea
asyn-ares: fix HTTPS-lookup when not on port 443
bagder Mar 17, 2026
a43ea59
http2: clear the h2 session at delete
bagder Mar 18, 2026
acb4fcb
tool_msgs: avoid null pointer deref for early errors
bagder Mar 17, 2026
3f06e27
urlapi: make dedotdotify handle leading dots correctly
bagder Mar 18, 2026
650b33a
badwords: pass config as filename arg
vszakats Mar 17, 2026
c3f04e7
ftp: reject PWD responses containing control characters
flightlesstux Mar 17, 2026
578ee6b
gcc: guard `#pragma diagnostic` in core code for <4.6, disable picky …
vszakats Mar 12, 2026
c5daffe
delta: avoid potential zero division
vszakats Mar 18, 2026
a3699e8
examples/websocket: fix to sleep more on Windows
vszakats Mar 18, 2026
454db7a
badwords: prefer 'null-terminated'
vszakats Mar 18, 2026
77c5470
scripts: drop unused CI scripts
vszakats Mar 18, 2026
41aaac6
lib: always use Curl_1st_fatal instead of Curl_1st_err
icing Mar 18, 2026
d986b89
rand: use `BCryptGenRandom()` in UWP builds
vszakats Mar 18, 2026
ad9836d
GHA: update dependency nghttp2/nghttp2 to v1.68.1
renovate[bot] Mar 18, 2026
e345dfb
asyn-ares: drop orphaned variable references
vszakats Mar 19, 2026
d86fd14
synctime: fix off-by-one read and write to a read-only buffer (Windows)
vszakats Mar 18, 2026
59405ff
build: enable `-Wimplicit-int-enum-cast` compiler warning, fix issues
vszakats Mar 18, 2026
86c25c0
x509asn1: fix to return error in an error case from `encodeOID()`
vszakats Mar 18, 2026
1509b0c
sshserver.pl: pass command-line to `system()` safely
vszakats Mar 19, 2026
1c7a270
sshserver.pl: harden more `system()` calls
vszakats Mar 19, 2026
2bb3643
sws: fix potential OOB write
vszakats Mar 18, 2026
fc222ec
tool_operate: fix condition for loading `curl-ca-bundle.crt` (Windows)
vszakats Mar 18, 2026
6c0772f
openssl: fix memory leaks in ECH code (OpenSSL 3)
vszakats Mar 18, 2026
3bc6ae5
mod_curltest: fix allocation size
vszakats Mar 18, 2026
e9c3dac
GHA: update dependency wolfSSL/wolfssl to v5.9.0
renovate[bot] Mar 19, 2026
ae864e8
examples: fix typo in comment
jstangroome Mar 19, 2026
387efe3
extract-unit-protos: retain internal paths for includes
vszakats Mar 19, 2026
ce51fb4
include: drop 'will' from public headers
vszakats Mar 19, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
202 changes: 0 additions & 202 deletions .azure-pipelines.yml

This file was deleted.

Loading