{"push_id":2803708860,"size":92,"distinct_size":92,"ref":"refs/heads/master","head":"ba58ce669ca6609253055d081a00a4f709ce382e","before":"acefdd0cd17443dae59921ae9f1245385e5ad4d0","commits":[{"sha":"29b78a537fc9602f974f8f7dfc5ae57b9df8d75e","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"docs/SECURITY-PROCESS: mention bounty, drop pre-notify\n\n+ The hackerone bounty and its process\n\n- We don't and can't handle pre-notification","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/29b78a537fc9602f974f8f7dfc5ae57b9df8d75e"},{"sha":"2c33105dbf146c78a9a9db6867d0644838e92856","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"schannel: enable CALG_TLS1PRF for w32api >= 5.1\n\nThe definition of CALG_TLS1PRF has been fixed in the 5.1 branch:\nhttps://osdn.net/projects/mingw/scm/git/mingw-org-wsl/commits/73aedcc0f2e6ba370de0d86ab878ad76a0dda7b5","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/2c33105dbf146c78a9a9db6867d0644838e92856"},{"sha":"5b511b0958f06f72c99494364cbb8f33c4900dd4","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"smb: fix memory-leak in URL parse error path\n\nDetected by OSS-Fuzz\nBug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9369\nCloses #2740","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/5b511b0958f06f72c99494364cbb8f33c4900dd4"},{"sha":"f8be737d8f5276a6ab4c9560d896fb5585d2933e","author":{"name":"Patrick Monnerat","email":"cbb7353e6d953ef360baf960c122346276c6e320@monnerat.net"},"message":"content_encoding: accept up to 4 unknown trailer bytes after raw deflate data\n\nSome servers issue raw deflate data that may be followed by an undocumented\ntrailer. This commit makes curl tolerate such a trailer of up to 4 bytes\nbefore considering the data is in error.\n\nReported-by: clbr on github\nFixes #2719","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/f8be737d8f5276a6ab4c9560d896fb5585d2933e"},{"sha":"8c00412428b3bbe4d56db7905372c7e6d416fbc0","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"test1422: add required file feature\n\ncurl configured with --enable-debug --disable-file currently complains\non test1422:\nInfo: Protocol \"file\" not supported or disabled in libcurl\n\nMake test1422 dependend on enabled FILE protocol to fix this.\n\nFixes https://github.com/curl/curl/issues/2741\nCloses https://github.com/curl/curl/pull/2742","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/8c00412428b3bbe4d56db7905372c7e6d416fbc0"},{"sha":"092f6815c808489f1cea3df8449e16dff2c35e6b","author":{"name":"Rodger Combs","email":"1e908b0db5ffa80234f1bf7f5675a22bc18ed9fb@gmail.com"},"message":"darwinssl: add support for ALPN negotiation","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/092f6815c808489f1cea3df8449e16dff2c35e6b"},{"sha":"a82372e0fb3aa3ce9ab27687c4d4a738a6ec9064","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"header output: switch off all styles, not just unbold\n\n... the \"unbold\" sequence doesn't work on the mac Terminal.\n\nReported-by: Zero King\nFixes #2736\nCloses #2738","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/a82372e0fb3aa3ce9ab27687c4d4a738a6ec9064"},{"sha":"d1207c07d0cc3c7870e50865052bb59850917ec9","author":{"name":"Ruslan Baratov","email":"8c8b9adeb37354d4aaea194f1291754c95de4b79@yahoo.com"},"message":"CMake: Update scripts to use consistent style\n\nCloses #2727\nReviewed-by: Sergei Nikulov","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/d1207c07d0cc3c7870e50865052bb59850917ec9"},{"sha":"db2ac90eaf45f995608cf97bb1b2f811a143477e","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"RELEASE-NOTES: sync\n\n... and work toward 7.61.1","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/db2ac90eaf45f995608cf97bb1b2f811a143477e"},{"sha":"7bc118043749d3a533e16b45269446a1edbd09d8","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"test1143: disable MSYS2's POSIX path conversion\n\nBy default, the MSYS2 bash interprets http:/%HOSTIP:%HTTPPORT/want/1143\nas a POSIX file list and converts it to a Windows file list.\nDisable this with MSYS2_ARG_CONV_EXCL for the test to pass.\n\nRef https://github.com/msys2/msys2/wiki/Porting#filesystem-namespaces\nCloses https://github.com/curl/curl/pull/2765","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/7bc118043749d3a533e16b45269446a1edbd09d8"},{"sha":"73af7bcd617a8c0312bd8a083daa5a8fad2c794e","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"smb_getsock: always wait for write socket too\n\n... the protocol is doing read/write a lot, so it needs to write often\neven when downloading. A more proper fix could check for eactly when it\nwants to write and only ask for it then.\n\nWithout this fix, an SMB download could easily get stuck when the event-driven\nAPI was used.\n\nCloses #2768","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/73af7bcd617a8c0312bd8a083daa5a8fad2c794e"},{"sha":"7b9bc96c7716f34dbd1f525aefb77d74b8b0f528","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"http2: several cleanups\n\n- separate easy handle from connections better\n- added asserts on a number of places\n- added sanity check of pipelines for debug builds\n\nCloses #2751","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/7b9bc96c7716f34dbd1f525aefb77d74b8b0f528"},{"sha":"1550e844b1a037022acf87e52585c2f4c15f045a","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"test214: disable MSYS2's POSIX path conversion for URL\n\nBy default, the MSYS2 bash converts all backslashes to forward slashes\nin URLs. Disable this with MSYS2_ARG_CONV_EXCL for the test to pass.\n\nRef https://github.com/msys2/msys2/wiki/Porting#filesystem-namespaces","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/1550e844b1a037022acf87e52585c2f4c15f045a"},{"sha":"6d13432bfa1097da7efb4a5fffac27a22af2002c","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"tests: fixes for Windows line endlings\n\nSet mode=\"text\" when line endings depend on the system representation.\n\nCloses https://github.com/curl/curl/pull/2772","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/6d13432bfa1097da7efb4a5fffac27a22af2002c"},{"sha":"81377cace6a047308008d36740042231d6c7d122","author":{"name":"Daniel Stenberg","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@haxx.se"},"message":"vtls: set conn->data when closing TLS\n\nFollow-up to 1b76c38904f0. The VTLS backends that close down the TLS\nlayer for a connection still needs a Curl_easy handle for the session_id\ncache etc.\n\nFixes #2764\nCloses #2771","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/81377cace6a047308008d36740042231d6c7d122"},{"sha":"26e35844e776e601aead505e37e5c6c8e1a41cf3","author":{"name":"Marcel Raad","email":"194f6ec8b8e5f542d0850d695a0b5bebac6b22a2@teamviewer.com"},"message":"test320: treat curl320.out file as binary\n\nOtherwise, LF line endings are converted to CRLF on Windows,\nbut no conversion is done for the reply, so the test case fails.\n\nCloses https://github.com/curl/curl/pull/2776","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/26e35844e776e601aead505e37e5c6c8e1a41cf3"},{"sha":"df57b439f4cfd594bde29055e7258607056985dc","author":{"name":"Johannes Schindelin","email":"53fb8db7833fca1e1746dd8592f61048d350f64c@gmx.de"},"message":"auth: only ever pick CURLAUTH_BEARER if we *have* a Bearer token\n\nThe Bearer authentication was added to cURL 7.61.0, but there is a\nproblem: if CURLAUTH_ANY is selected, and the server supports multiple\nauthentication methods including the Bearer method, we strongly prefer\nthat latter method (only CURLAUTH_NEGOTIATE beats it), and if the Bearer\nauthentication fails, we will never even try to attempt any other\nmethod.\n\nThis is particularly unfortunate when we already know that we do not\nhave any Bearer token to work with.\n\nSuch a scenario happens e.g. when using Git to push to Visual Studio\nTeam Services (which supports Basic and Bearer authentication among\nother methods) and specifying the Personal Access Token directly in the\nURL (this aproach is frequently taken by automated builds).\n\nLet's make sure that we have a Bearer token to work with before we\nselect the Bearer authentication among the available authentication\nmethods.\n\nSigned-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>\nCloses #2754","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/df57b439f4cfd594bde29055e7258607056985dc"},{"sha":"6f5ef24f068a86d0f61ce39f674462128c1743d1","author":{"name":"Johannes Schindelin","email":"53fb8db7833fca1e1746dd8592f61048d350f64c@gmx.de"},"message":"auth: pick Bearer authentication whenever a token is available\n\nSo far, the code tries to pick an authentication method only if\nuser/password credentials are available, which is not the case for\nBearer authentictation...\n\nSigned-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>\nCloses #2754","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/6f5ef24f068a86d0f61ce39f674462128c1743d1"},{"sha":"d0d48b42763ec8649196fbf7648ad9de0127dc27","author":{"name":"djelinski","email":"16e3aa6144c1926014870043557c73cbbbe60beb@users.noreply.github.com"},"message":"system_win32: fix version checking\n\nIn the current version, VERSION_GREATER_THAN_EQUAL 6.3 will return false\nwhen run on windows 10.0. This patch addresses that error.\n\nCloses https://github.com/curl/curl/pull/2792","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/d0d48b42763ec8649196fbf7648ad9de0127dc27"},{"sha":"a7091ba75d820612ec260da805e9148397eddfcd","author":{"name":"Even Rouault","email":"d8205f621e59e021912ca64710aac70d69f0e24a@spatialys.com"},"message":"reuse_conn(): free old_conn->options\n\nThis fixes a memory leak when CURLOPT_LOGIN_OPTIONS is used, together with\nconnection reuse.\n\nI found this with oss-fuzz on GDAL and curl master:\nhttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9582\nI couldn't reproduce with the oss-fuzz original test case, but looking\nat curl source code pointed to this well reproducable leak.\n\nCloses #2790","distinct":true,"url":"https://api.github.com/repos/sweatybridge/curl/commits/a7091ba75d820612ec260da805e9148397eddfcd"}]}
{"actor":{"display_login":"sweatybridge"}}