alhudz 7de0a7e71a chunked: reject invalid bytes in trailer ... Trailers are delivered to the application as headers via CLIENTWRITE_TRAILER, but unlike regular response headers they skipped the verify_header() checks, so a server could smuggle a nul byte (or stray CR) into a header reaching CURLOPT_HEADERFUNCTION and curl_easy_header(). Run each assembled trailer line through Curl_verify_header(), the same validation used for normal headers. Covered by the new test 2106. Closes #21896		2026-06-08 13:56:10 +02:00
..
certs	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
cmake	cmake: add CMake Config-based dependency detection	2026-03-21 18:52:31 +01:00
data	chunked: reject invalid bytes in trailer	2026-06-08 13:56:10 +02:00
http	progress: fx CURLINFO time reporting	2026-06-07 14:39:10 +02:00
libtest	lib1587: drop redundant includes	2026-06-08 00:42:51 +02:00
server	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
tunit	tool1622: assert width and exact format boundaries	2026-05-07 08:00:03 +02:00
unit	urlapi: fix memleaks on error in parse_hostname_login()	2026-06-08 00:42:51 +02:00
.gitignore	build: stop building and installing runtests.1 and testcurl.1	2026-04-28 09:07:27 +02:00
allversions.pm	badwords: fix issues found in tests	2025-11-17 13:30:35 +01:00
appveyor.pm	tidy-up: miscellaneous	2026-05-20 00:50:43 +02:00
azure.pm	tidy-up: miscellaneous	2026-05-20 00:50:43 +02:00
CMakeLists.txt	cmake: add basic way to select pytests to run	2026-06-01 15:07:17 +02:00
config.in
configurehelp.pm.in
devtest.pl	tidy-up: miscellaneous	2026-05-16 01:56:17 +02:00
dictserver.py	tests: make whitespace between functions and classes consistent	2026-04-08 10:28:05 -07:00
directories.pm	tidy-up: miscellaneous	2025-12-12 04:18:48 +01:00
ech_combos.py	tidy-up: add space around operators, where missing	2026-05-28 10:12:00 +02:00
ech_tests.sh	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
ftpserver.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
getpart.pm	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
globalconfig.pm	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
http-server.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
http2-server.pl	tidy-up: miscellaneous	2025-11-17 13:32:43 +01:00
http3-server.pl	tidy-up: miscellaneous	2025-11-17 13:32:43 +01:00
Makefile.am	tidy-up: miscellaneous	2026-01-15 13:06:13 +01:00
memanalyze.pl	runtests: make memanalyzer a Perl module (for 1.1-2x speed-up per test run)	2025-12-04 13:14:32 +01:00
memanalyzer.pm	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
negtelnetserver.py	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
nghttpx.conf
pathhelp.pm	tidy-up: miscellaneous	2026-04-14 01:08:32 +02:00
processhelp.pm	tidy-up: add space around operators, where missing	2026-05-28 10:12:00 +02:00
requirements.txt	GHA: bump actions and pips	2026-05-01 21:19:22 +02:00
rtspserver.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
runner.pm	tests: add an assert to avoid IPC blocking	2026-05-20 11:32:38 -07:00
runtests.pl	runtests: allow skipping tests on torture, use for test 357	2026-06-08 13:26:31 +02:00
secureserver.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
serverhelp.pm	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
servers.pm	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
smbserver.py	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
sshhelp.pm	runtests: allow configuring SSH host/client key algorithm	2026-04-05 11:19:42 +02:00
sshserver.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
test745.pl	tidy-up: Markdown, clang-format nits	2026-01-22 23:44:47 +01:00
test971.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1119.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
test1135.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1139.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1140.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1165.pl	build: disable typecheck via the command-line instead of curl_config.h	2026-02-20 16:32:37 +01:00
test1167.pl	tidy-up: miscellaneous	2026-04-14 01:08:32 +02:00
test1173.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
test1175.pl	badwords: fix issues found in tests	2025-11-17 13:30:35 +01:00
test1177.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1222.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1275.pl	test1275.pl: ignore indented sections in markdowns	2026-04-01 14:36:10 +02:00
test1276.pl	tidy-up: add space around operators, where missing	2026-05-28 10:12:00 +02:00
test1477.pl	tidy-up: miscellaneous	2025-12-12 04:18:48 +01:00
test1486.pl	src: fix formatting nits	2025-12-03 20:50:18 +01:00
test1488.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1544.pl	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
test1707.pl	perl: harden external command invocations	2026-03-26 14:20:07 +01:00
testcurl.pl	testcurl.pl: replace shell commands with Perl rmtree()	2026-03-21 22:42:38 +01:00
testutil.pm	tidy-up: add space around operators, where missing	2026-05-28 10:12:00 +02:00
tftpserver.pl	tidy-up: miscellaneous	2026-06-01 22:33:57 +02:00
util.py	tests: make whitespace between functions and classes consistent	2026-04-08 10:28:05 -07:00
valgrind.pm	scripts: drop redundant double-quotes: "$var" -> $var (Perl)	2026-03-21 13:21:06 +01:00
valgrind.supp