Commit Graph

174 Commits

Author SHA1 Message Date
Jose Quaresma
ba7b606636 curl: 8.3.0 -> 8.4.0
curl and libcurl 8.4.0

 Public curl releases:         252
 Command line options:         258
 curl_easy_setopt() options:   303
 Public functions in libcurl:  93
 Contributors:                 2995

This release includes the following changes:

 o curl: add support for the IPFS protocols via HTTP gateway [46]
 o curl_multi_get_handles: get easy handles from a multi handle [20]
 o mingw: delete support for legacy mingw.org toolchain [45]

This release includes the following bugfixes:

 o acinclude.m4: Document proper system truststore on FreeBSD [83]
 o appveyor: fix yamlint issues, indent [67]
 o appveyor: rewrite batch in PowerShell + CI improvements [109]
 o autotools: adjust `CURL_CA_PATH` value to CMake [53]
 o autotools: restore `HAVE_IOCTL_*` detections [111]
 o base64: also build for curl [78]
 o bufq: remove Curl_bufq_skip_and_shift (unused) [47]
 o build: delete checks for C89 standard headers [65]
 o build: do not publish `HAVE_BORINGSSL`, `HAVE_AWSLC` macros [114]
 o cf-socket: simulate slow/blocked receives in debug [120]
 o cmake, configure: also link with CoreServices [32]
 o cmake: add check for suseconds_t [91]
 o cmake: add feature checks for `memrchr` and `getifaddrs` [57]
 o cmake: add missing checks [86]
 o cmake: delete old `HAVE_LDAP_URL_PARSE` logic [105]
 o cmake: detect `HAVE_CLOCK_GETTIME_MONOTONIC_RAW` [75]
 o cmake: detect `HAVE_GETADDRINFO_THREADSAFE` [76]
 o cmake: detect `sys/wait.h` and `netinet/udp.h` [61]
 o cmake: detect TLS-SRP in OpenSSL/wolfSSL/GnuTLS [93]
 o cmake: disable unity mode with Windows Unicode + TrackMemory [108]
 o cmake: fix `HAVE_LDAP_SSL`, `HAVE_LDAP_URL_PARSE` on non-Windows [110]
 o cmake: fix `HAVE_WRITABLE_ARGV` detection [77]
 o cmake: fix duplicate symbols when linking tests [73]
 o cmake: fix missing `zlib.h` when compiling `libcurltool` [72]
 o cmake: fix stderr initialization in unity builds [71]
 o cmake: fix the help text to the static build option in CMakeLists.txt [10]
 o cmake: fix unity builds for more build combinations [96]
 o cmake: fix unity symbol collisions in h2 builds [48]
 o cmake: fix unity with Windows Unicode + TrackMemory [107]
 o cmake: improve OpenLDAP builds [92]
 o cmake: lib `CURL_STATICLIB` fixes (Windows) [74]
 o cmake: move global headers to specific checks [58]
 o cmake: pre-cache `HAVE_BASENAME` for mingw-w64 and MSVC [85]
 o cmake: pre-cache `HAVE_POLL_FINE` on Windows [36]
 o cmake: tidy-up `NOT_NEED_LBER_H` detection
 o cmake: validate `CURL_DEFAULT_SSL_BACKEND` config value [50]
 o configure: check for the capath by default [63]
 o configure: remove unused checks [87]
 o configure: replace adhoc domain with `localhost` in tests [79]
 o configure: sort AC_CHECK_FUNCS
 o connect: expire the timeout when trying next [54]
 o connect: only start the happy eyeballs timer when needed [95]
 o cookie: do not store the expire or max-age strings [16]
 o cookie: remove unnecessary struct fields [17]
 o cookie: set ->running in cookie_init even if data is NULL [5]
 o create-dirs.d: clarify it also uses --output-dirs [66]
 o curl.h: mark CURLSSLBACKEND_NSS as deprecated since 8.3.0 [18]
 o curl_easy_pause.3: mention h2/h3 buffering [113]
 o curl_easy_pause.3: mention it works within callbacks [112]
 o curl_easy_pause: set "in callback" true on exit if true [100]
 o CURLOPT_DEBUGFUNCTION.3: warn about internal handles [122]
 o docs/libcurl/opts/Makefile.inc: add missing manpage files
 o docs: adapt SEE ALSO sections to new requirements [52]
 o docs: explain how PINNEDPUBLICKEY is independent of VERIFYPEER [68]
 o docs: replace made up domains with example.com [82]
 o docs: update curl man page references [89]
 o docs: use CURLSSLBACKEND_NONE [19]
 o doh: inherit DEBUGFUNCTION/DATA [12]
 o escape: replace Curl_isunreserved with ISUNRESERVED [2]
 o FAQ: How do I upgrade curl.exe in Windows? [84]
 o GHA/linux: run singleuse to detect single-use global functions [35]
 o GHA: add workflow to compare configure vs cmake outputs [102]
 o h2-proxy: remove left-over mistake in drain_tunnel() [7]
 o h2: testcase and fix for pausing h2 streams [49]
 o h3: add support for ngtcp2 with AWS-LC builds [103]
 o http2: refused stream handling for retry [121]
 o http: fix CURL_DISABLE_BEARER_AUTH breakage [28]
 o http: h1/h2 proxy unification [21]
 o http: remove wrong comment for http_should_fail [55]
 o http: use per-request counter to check too large headers [6]
 o http_aws_sigv4: fix sorting with empty parts [13]
 o idn: fix WinIDN null ptr deref on bad host [90]
 o idn: if idn2_check_version returns NULL, return error [27]
 o inet_ntop: add typecast to silence Coverity [51]
 o lib: disambiguate Curl_client_write flag semantics [24]
 o lib: enable hmac for digest as well [26]
 o lib: failf/infof compiler warnings [8]
 o lib: let the max filesize option stop too big transfers too [44]
 o lib: move handling of `data->req.writer_stack` into Curl_client_write() [97]
 o lib: provide and use Curl_hexencode [62]
 o lib: remove TIME_WITH_SYS_TIME [88]
 o lib: use wrapper for curl_mime_data fseek callback [30]
 o libssh2: fix error message on failed pubkey-from-file [22]
 o libssh: cap SFTP packet size sent [14]
 o Makefile.mk: always set `CURL_STATICLIB` for lib (Windows) [42]
 o MANUAL.md: change domain to example.com [11]
 o misc: better random strings [15]
 o MQTT: improve receive of ACKs [125]
 o multi: do CURLM_CALL_MULTI_PERFORM at two more places [99]
 o multi: fix small timeouts [70]
 o multi: remove Curl_multi_dump [37]
 o multi: round the timeout up to prevent early wakeups [98]
 o multi: set CURLM_CALL_MULTI_PERFORM after switch to DOING_MORE [115]
 o openssl: improve ssl shutdown handling [69]
 o openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR [104]
 o pytest: exclude test_03_goaway in CI runs due to timing dependency [23]
 o quic: set ciphers/curves the same way regular TLS does [43]
 o quiche: fix build error with --with-ca-fallback [1]
 o RELEASE-PROCEDURE.md: updated coming release dates
 o runtests: display the test status if tests appear hung [81]
 o runtests: eliminate a warning on old perl versions
 o socks: return error if hostname too long for remote resolve [118]
 o src/mkhelp: make generated code pass `checksrc` [59]
 o test1056: disable on Windows
 o test1474: disable test on NetBSD, OpenBSD and Solaris 10 [31]
 o test1592: greatly increase the maximum test timeout
 o test1903: actually verify the cookies after the test [116]
 o test1906: set a lower timeout since it's hit on Windows [117]
 o test2600: remove special case handling for USE_ALARM_TIMEOUT [3]
 o test650: fix an end tag typo
 o test661: return from test early in case of curl error
 o test: add missing <feature>s
 o tests: close the shell used to start sshd [41]
 o tests: fix a race condition in ftp server disconnect [101]
 o tests: fix compiler warnings [38]
 o tests: Fix zombie processes left behind by FTP tests. [80]
 o tests: improve SLOWDOWN test reliability by reducing sent data
 o tests: increase lib571 timeout from 3s to 30s [106]
 o tests: log the test result code after each libtest
 o tests: propagate errors in libtests
 o tests: set --expect100-timeout to improve test reliability
 o tests: show which curl tool `runtests.pl` is using [60]
 o tests: stop overriding the lock timeout
 o tftpd: always use curl's own tftp.h [25]
 o tool: use our own stderr variable [94]
 o tool_cb_wrt: fix debug assertion [4]
 o tool_getparam: accept variable expansion on file names too [123]
 o tool_setopt: remove unused function tool_setopt_flags [56]
 o upload-file.d: describe the file name slash/backslash handling [9]
 o url: fall back to http/https proxy env-variable if ws/wss not set [119]
 o url: fix netrc info message [39]
 o warnless: remove unused functions [33]
 o wolfssh: do cleanup in Curl_ssh_cleanup [40]
 o wolfssl: allow capath with CURLOPT_CAINFO_BLOB [29]
 o wolfssl: if CURLOPT_CAINFO_BLOB is set, ignore the CA files [34]
 o wolfssl: ignore errors in CA path [64]

(From OE-Core rev: aeab27305b3f207530ad1c749f6668c0df6cbed1)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-12 07:53:40 +01:00
Robert Joslyn
2be637e323 curl: Skip tests marked flaky
Some tests can fail intermittently and upstream has marked these as
flaky so they can easily be skipped. At present there are 12 tests
marked flaky with 10 of them running in the default recipe
configuration. Skip them to avoid the failures.

(From OE-Core rev: 34f37de80928bb23a594268b0e996beb575ca51b)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-29 23:11:59 +01:00
Robert Joslyn
c63c48b9e4 curl: Update from 8.2.1 to 8.3.0
NSS support was removed, so adjust PACKAGECONFIG options.

The --enable-crypto-auth option was removed and split into separate
options for basic-auth, bearer-auth, digest-auth, kerberos-auth,
negotiate-auth, and aws. Enable these new options since upstream enables
them by default.

Disable test 1279 since this requires libcurl and hangs the tests.

(From OE-Core rev: 148de08220c0ad390ec533e452cbaad7a9338204)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:25:42 +01:00
Alexander Kanavin
4ef31c91ca curl: build and run the full set of ptests
Not running make in the top level tests/ directory
excluded about a third of them (those that consisted
of running small test binaries).

Also, run tests in parallel, which reduces total time
from five minutes to about 75 seconds.

(From OE-Core rev: ff88f275f5f8d52da2967726d8880cbbfdfc8f19)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Wang Mingyu
c6bbb1c8c1 curl: upgrade 8.2.0 -> 8.2.1
Changelog:
=========
   amigaos: fix sys/mbuf.h m_len macro clash
   amissl: add missing signal.h include
   amissl: fix AmiSSL v5 detection
   cfilters: rename close/connect functions to avoid clashes
   ciphers.d: put URL in first column
   cmake: add `libcurlu`/`libcurltool` for unit tests
   cmake: update ngtcp2 detection
   configure: check for nghttp2_session_get_stream_local_window_size
   CONTRIBUTE: drop mention of copyright year ranges
   CONTRIBUTE: fix syntax in commit message description
   curl_multi_wait.3: fix arg quoting to doc macro .BR
   docs: mark two TLS options for TLS, not SSL
   docs: provide more see also for cipher options
   hostip: return IPv6 first for localhost resolves
   http2: fix regression on upload EOF handling
   http: VLH, very large header test and fixes
   libcurl-errors.3: add CURLUE_OK
   os400: correct EXPECTED_STRING_LASTZEROTERMINATED
   quiche: fix lookup of transfer at multi
   quiche: fix segfault and other things
   rustls: update rustls-ffi 0.10.0
   socks: print ipv6 address within brackets
   src/mkhelp: strip off escape sequences
   tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T
   transfer: do not clear the credentials on redirect to absolute URL
   unittest: remove unneeded *_LDADD
   websocket: rename arguments/variables to match docs

(From OE-Core rev: bc868329c4bac1d5d3831a7d86b561849ca533a3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Alexander Kanavin
5020abf342 curl: ensure all ptest failures are caught
Piping results through sed is masking failures that aren't
picked up by sed expressions.

One such failure probes the source tree, and so isn't
relevant for target testing, and can be disabled.

(From OE-Core rev: 86c96cbf68d986b44fdb45e988343ce29d6b8cc7)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-09 12:44:52 +01:00
Robert Joslyn
be48b99874 curl: Refine ptest perl RDEPENDS
RDEPEND on the specific perl modules required for the tests rather than
the perl-modules meta package.

(From OE-Core rev: 0c13dac8fe3f432b7756c57a5892f8ab99d43166)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-25 15:27:33 +01:00
Robert Joslyn
5a3e63f513 curl: Update from 8.1.2 to 8.2.0
This is a feature and bugfix update. Full release notes available at:
https://curl.se/changes.html#8_2_0

(From OE-Core rev: 5cfdcc722c7b7a153bedcf2f490c892565a87cfa)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-25 15:27:33 +01:00
Wang Mingyu
426ddff18d curl: upgrade 8.1.1 -> 8.1.2
Changelog:
===========
- lib1560: verify more scheme guessing
- page-header: minor wording polish in the URL segment
- page-header: mention curl version and how to figure out current release
- RELEASE-NOTES: synced
- configure: without pkg-config and no custom path, use -lnghttp2
- curl: cache the --trace-time value for a second
- libcurl.m4: remove trailing 'dnl' that causes this to break autoconf
- http3: send EOF indicator early as possible
- scripts/contri*sh: no longer grep -v ' '
- cf-socket: restore Curl_sock_assign_addr()
- libssh: when keyboard-interactive auth fails, try password
- configure: fix build with arbitrary CC and LD_LIBRARY_PATH
- urlapi: remove superfluous host name check
- http2: fix EOF handling on uploads with auth negotiation
- lib: remove unused functions, make single-use static
- scripts/singleuse.pl: add more API calls
- configure: quote the assignments for run-compiler
- misc: fix spelling mistakes

(From OE-Core rev: db5773bf9c5e78affaaf0a21422bad07560eaa86)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Robert Joslyn
9e3a0a060f curl: Update from 8.1.0 to 8.1.1
This is a bugfix only release. Release notes:
https://curl.se/changes.html#8_1_1

(From OE-Core rev: 833191171181f11802a3e0ae8b91b8ca5892b067)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
Robert Joslyn
dd5ac59404 curl: Update from 8.0.1 to 8.1.0
This is a feature and bugfix release. Release notes are available at:
https://curl.se/changes.html#8_1_0

(From OE-Core rev: b3265b703590a9e2a7dd6772c5ca0a72b21d7567)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-22 10:53:49 +01:00
Robert Joslyn
7d6ed5c127 curl: Update from 7.88.1 to 8.0.1
This update contains bug, security, and feature updates. For detailed
release notes, see https://curl.se/changes.html#8_0_1

(From OE-Core rev: 139153369b993ebe7f47b0f1669c110b27f6236e)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-03-23 22:36:46 +00:00
Wang Mingyu
650579058e curl: upgrade 7.88.0 -> 7.88.1
(From OE-Core rev: d90609cce882e8c1a677865f91a0e4d7b38c4e63)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-02-24 13:31:45 +00:00
Robert Joslyn
b226d4877f curl: Update 7.87.0 to 7.88.0
This is a feature and bugfix update. Release notes available at:
https://curl.se/changes.html#7_88_0

License-Update: Copyright year updated
(From OE-Core rev: c79c895269050c44134a16ab6801c06b9497cf37)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-02-20 15:18:30 +00:00
Federico Pellegrin
87f82469fc curl: fix dependencies when building with ldap/ldaps
openldap is added as a dependency so the build will not fail,
as otherwise ldap headers are not found during configure phase

Note: due to upstream bug (now fixed) building LDAP/LDAPS support
with minimal configurations can sometimes not work, see details at:
https://github.com/curl/curl/pull/10445

(From OE-Core rev: a999f62f5692687a5557f7a50c7c768c50f3d7d3)

Signed-off-by: Federico Pellegrin <fede@evolware.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-02-15 10:21:34 +00:00
Ross Burton
0cd69599e3 curl: don't enable debug builds
In oe-core 27824261 --enable-debug was added to the configure arguments
to turn on debugging symbols.  However, enabling debug mode does more
than turn on debugging symbols and introduces some codepaths that can be
controlled with environment variables.  Bluntly, the curl maintainer
says that --enable-debug should not be used in production:

https://curl.se/mail/lib-2023-01/0039.html

I did a build and verified that the curl-dbg package doesn't massively
shrink, so the debug symbols are still being built.

Remove the debug options and hide them behind a PACKAGECONFIG, with a
comment that it should not be used in production.

(From OE-Core rev: 3ed3b2ffeeaa5d888f77dd30cb8cd81d3275398a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-01-12 23:08:59 +00:00
Alexander Kanavin
bd250d24d3 curl: upgrade 7.86.0 -> 7.87.0
(From OE-Core rev: 99361cda25e5858f5edbcb6a275258670b678ee1)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-01-06 12:03:48 +00:00
Ranjitsinh Rathod
4a246e06cb curl: Correct LICENSE from MIT-open-group to curl
LICENSE for curl is set to MIT-open-group which is wrong and proper
license is 'curl'

I check below link and the line "Curl and libcurl are licensed under
the license below, which is inspired by MIT/X, but not identical." says
that the license is identical to MIT but actual license is identical
from the file "meta/files/common-licenses/curl"
Link: https://curl.se/docs/copyright.html

Also, I do not find the MIT-open-group license text in the entire
source-code

(From OE-Core rev: 34b228bd3a80a74bf4d84ef7ee362f4ab1e3a466)

Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-12-17 23:49:56 +00:00
Robert Joslyn
04eee95515 curl: Update 7.85.0 to 7.86.0
Feature and security update. Fixes the following CVEs:

 - CVE-2022-32221
 - CVE-2022-35260
 - CVE-2022-42915
 - CVE-2022-42916

Release notes: https://curl.se/changes.html#7_86_0

(From OE-Core rev: df55dced4b4980a8c6746acb2e02b80850d8613e)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-11-01 17:34:58 +00:00
Khem Raj
fff1dd78d3 curl: Add missing perl modules in ptest rdepends
These modules outside of perl-modules are necessary to run curl-ptests

(From OE-Core rev: e885875f2af9cee0e7557ee130d3180492e507dd)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-09-17 07:47:07 +01:00
Robert Joslyn
0c0cd16447 curl: Update to 7.85.0
Release notes are available at: https://curl.se/changes.html#7_85_0

Remove backported patches as they are included in the new release.

(From OE-Core rev: 5170b1a6088a623af86ffca635a10bd010d709e5)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-09-02 15:58:25 +01:00
Richard Purdie
7069756572 curl: Fix determinism issues in ptest package
NROFF can take different values depending on the filesystem layout of the
host system and this leaks onto the target ptest package through the
Makefiles. Since ptest doesn't use them, delete them to resovle that issue.

Also ensure the task can rerun even if it already deleted configurehelp.pm

[YOCTO #14863]

(From OE-Core rev: 0b1e3746478e9ad1800b027ab5dc96495997807e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-16 07:40:33 +01:00
He Zhe
3a5b5bc977 curl: Fix build failure for qemuriscv64
Backport a patch from upstream to fix the following build failure.

tmp-glibc/work/riscv64-wrs-linux/curl/7.84.0-r0/recipe-sysroot-native/
usr/bin/riscv64-wrs-linux/../../libexec/riscv64-wrs-linux/gcc/
riscv64-wrs-linux/12.1.0/ld: ../lib/.libs/libcurl.so:
undefined reference to `__atomic_exchange_1'
collect2: error: ld returned 1 exit status

(From OE-Core rev: 13d2bf6a34f4182c5c8bdd280d1ffd4caac3844a)

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-12 23:56:10 +01:00
Yogesh Tyagi
ee222ca0ce curl : Add ptest
- curl-ptest is taking around 200 seconds to execute so
  added curl-ptest to PTESTS_SLOW
- This patch is rework on an existing patch provided
  by Maxin B. John (maxin.john@intel.com)
  https://www.openembedded.org/pipermail/openembedded-core/2017-July/139176.html
- Below is the run log of curl-ptest
  START: ptest-runner
  2022-07-03T15:52
  BEGIN: /usr/lib/curl/ptest
  ********* System characteristics ********
  * curl 7.83.1 (x86_64-poky-linux-gnu)
  * libcurl/7.83.1 OpenSSL/3.0.3 zlib/1.2.12 libidn2/2.3.2
  * Features: alt-svc AsynchDNS Debug HSTS HTTPS-proxy IDN Largefile libz NTLM SSL TLS-SRP UnixSockets
  * Disabled: headers-api
  * Host: qemux86-64
  * System: Linux qemux86-64 5.15.44-yocto-standard #1 SMP PREEMPT Tue May 31 20:28:59 UTC 2022 x86_64 GNU/Linux
  * OS: linux
  * Servers: HTTP-unix
  * Env:
  * Seed: 238593
  *****************************************
  PASS: test 0001 (1   out of 1466, remaining: 25:07, took 1.029s, duration: 00:01)
  PASS: test 0002 (2   out of 1466, remaining: 13:21, took 0.065s, duration: 00:01)
  ...
  ...
  PASS: test 3019 (1460 out of 1466, remaining: 00:00, took 0.012s, duration: 03:16)
  PASS: test 3020 (1461 out of 1466, remaining: 00:00, took 0.011s, duration: 03:16)
  test 3025...The tool set in the test case for this: 'lib3025' does not exist
  TESTDONE: 1280 tests were considered during 197 seconds.
  TESTDONE: 783 tests out of PASS: 783 report: 100%
  DURATION: 202
  END: /usr/lib/curl/ptest
  2022-07-03T15:56
  STOP: ptest-runner
  TOTAL: 1 FAIL: 0
- disable the curl tests that are expected to fail
- remove the generated file configurehelp.pm from curl test beacuse it is causing reproducible build failure.
  this file is used by some curl tests to scan symbols from curl headers. we are anyway not installing curl
  headers and already have disabled those tests.
  [YOCTO #6707]

(From OE-Core rev: a0ea00daace826129cdec8f714ca7b7c60e9dadf)

Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-08 00:09:42 +01:00
Robert Joslyn
48e4956d71 curl: Update to 7.84.0
This is a feature and bugfix update. Release notes are available at:
https://curl.se/changes.html#7_84_0

Backport a patch fixing a compile issue where sched.h was not included
on certain platforms.

(From OE-Core rev: 991a49672a8c45e319dc9d9b0466cf96725c1363)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-04 15:15:14 +01:00
Alexander Kanavin
9e95ffe9b2 curl: upgrade 7.83.0 -> 7.83.1
(From OE-Core rev: d1ea8cb4e18551f542f783cc88e96c6360b3c134)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-20 22:52:22 +01:00
Robert Joslyn
c9ad977a0b curl: Update to 7.83.0
This is a minor feature and bugfix release. Changes include:

 * curl: add %header{name} experimental support in -w handling
 * curl: add %{header_json} experimental support in -w handling
 * curl: add --no-clobber
 * curl: add --remove-on-error
 * header api: add curl_easy_header and curl_easy_nextheader
 * msh3: add support for QUIC and HTTP/3 using msh3

Full changelog at: https://curl.se/changes.html#7_83_0

(From OE-Core rev: 2e525a64ee945559afaad8b0285ac5d48a2748b4)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-04-30 22:00:20 +01:00
Robert Joslyn
37cd2999e7 curl: Update to 7.82.0
Includes bug fixes and feature updates, such as addition of a --json flag
and the removal of mesalink support. Changelog available at:
https://curl.se/changes.html#7_82_0

LIC_FILES_CHKSUM changed due to copyright year update. Now that the full
SPDX license list is supported, refine the license from MIT to
MIT-open-group. The curl license contains the additional advertising
clause present in the Open Group variant.

Use a weak assignment with the RANDOM variable to make changes via
bbappend easier.

(From OE-Core rev: 5186d399b4e24273a35c9ad8b0c6fac8d626911a)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-07 22:44:55 +00:00
Christian Eggers
083623bdd3 curl: configure with '--without-ssl' if ssl is disabled
curl requires that at least one SSL implementation or explicitly
'--without-ssl' is specified. This is particularly the case if
PACKAGECONFIG is empty.

| configure: error: select TLS backend(s) or disable TLS with
--without-ssl.
|
| Select from these:
|
|   --with-amissl
|   --with-bearssl
|   --with-gnutls
|   --with-mbedtls
|   --with-mesalink
|   --with-nss
|   --with-openssl (also works for BoringSSL and libressl)
|   --with-rustls
|   --with-schannel
|   --with-secure-transport
|   --with-wolfssl
|

Fixes: eef6c45fc6ec ("curl: Rework openssl and random PACKAGECONFIGs")
(From OE-Core rev: 6c737396c705e1388aff5f5a599c901a1a1760a2)

Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-16 09:46:29 +00:00
Robert Joslyn
056ba497d7 curl: Rework openssl and random PACKAGECONFIGs
The existing ssl PACKAGECONFIG makes it slightly annoying to use another
crypto provider while removing openssl. Since --with-ssl is just a
deprecated version of --with-openssl, rename the PACKAGECONFIG to use
the newer preferred name. Note that --without-ssl implies no crypto
provider at all, and should only be used when trying to disable all
crypto support.

Move --with-random to it's own option, since it is useful for other
crypto providers, not just openssl.

(From OE-Core rev: eef6c45fc6ec0a496791123e8ba2f400a5d9d468)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-11 15:48:11 +00:00
Robert Joslyn
9050f383b5 curl: Update to 7.81.0
Update URLs to refelct what upstream is presently using and add zstd
PACKAGECONFIG.

(From OE-Core rev: cc029e5e1331b3a8f4181bbfdbe72c547916f458)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-11 15:48:11 +00:00
Alexander Kanavin
0dabf47665 curl: update 7.79.1 -> 7.80.0
(From OE-Core rev: 2c290dee4a1f951a9aa4af7252edace91f61e967)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-21 11:05:01 +00:00
Alexander Kanavin
640e2e9b77 curl: submit patch upstream
(From OE-Core rev: 9b1dba1a8e56f95bb3ab44130da293795975b67d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-03 10:12:42 +00:00
Alexander Kanavin
a901b31888 curl: update 7.78.0 -> 7.79.1
(From OE-Core rev: b4f08791b7652898f398c86db9352b706eeda9e4)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-10-23 17:42:25 +01:00
Ross Burton
21d529bdf3 curl: fix CVE-2021-22945 through -22947
(From OE-Core rev: cff6888f3b2b4bd0a42329b7f7c59b33c9d51265)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-10-14 22:32:50 +01:00
Richard Purdie
2e4f162e61 curl: Fix reproducibility issue with LDFLAGS
If we add DEBUG_PREFIX_MAP into LDFLAGS, curl-dev is no longer reproducible.
Fix this.

(From OE-Core rev: 3a30b7ad413de0e8f60504ba2be76107e4324640)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-12 06:26:15 +01:00
Mingli Yu
5324b7d6af curl: Upgrade to 7.78.0
Remove libmetalink configure option as this rarely used option is
removed in the new version [1].

[1] 265b14d6b3

(From OE-Core rev: a40524a5c5ad441eebd6b751c2fd66637509ae9d)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-04 10:38:26 +01:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Richard Purdie
725b711ba3 curl: upgrade 7.76.1 -> 7.77.0
(From OE-Core rev: f88e16f4e4f77f532502806246dda38dfbc1a1e5)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-31 14:31:02 +01:00
Alexander Kanavin
58515daf6b curl: update 7.76.0 -> 7.76.1
(From OE-Core rev: 3876bb2365be7600951ff27dd055eb52773d032b)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-25 22:36:09 +01:00
Khem Raj
96b4ed1e93 curl: Use openssl backend
use openssl instead of gnutls

(From OE-Core rev: c39452bf65a8baa0eac15e6c4d39cc0f88e089d0)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-20 13:56:48 +01:00
wangmy
218e1e3f47 curl: upgrade 7.75.0 -> 7.76.0
(From OE-Core rev: c1dfe36c5641ce1ddc1424e56037e23fd927c058)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18 11:37:25 +01:00
Meh Mbeh Ida Delphine
c8075ed8f1 recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes
Fixes: [YOCTO #13471]

(From OE-Core rev: 6db24928d62aeb093a0e6da6619713eaca57a96f)

Signed-off-by: Ida Delphine <idadelm@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02 20:39:36 +00:00
Anuj Mittal
31fe53e42a curl: upgrade 7.74.0 -> 7.75.0
License-Update: copyright years changed

(From OE-Core rev: c1e278cbcf193fc647557018b8d7ee7997817219)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-19 11:17:10 +00:00
Khairul Rohaizzat Jamaluddin
4f6358f50c curl: Update 7.73.0 -> 7.74.0
update to version 7.74.0

curl 7.74.0 hsts: add experimental support for Strict-Transport-Security with various bug fixes

Reference:
https://curl.se/changes.html#7_74_0

update includes fix for CVE:
CVE-2020-8284
CVE-2020-8285
CVE-2020-8286

(From OE-Core rev: 0461baec8bef003a0bfcc9939e4e40654be36f10)

Signed-off-by: Khairul Rohaizzat Jamaluddin <khairul.rohaizzat.jamaluddin@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-24 08:25:14 +00:00
Alexander Kanavin
3c2594f435 curl: upgrade 7.72.0 -> 7.73.0
(From OE-Core rev: f9aa9f075674e3908d950c3107be3e6230786f0b)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03 08:21:11 +00:00
Randy MacLeod
19f919b33f curl: Change SRC_URI from http to https
The official links on:
   https://curl.haxx.se/download.html
use https now and we're seeing this warning:
   WARNING: curl-native-7.72.0-r0 do_fetch: Failed to fetch URL http://curl.haxx.se/download/curl-7.72.0.tar.bz2, attempting MIRRORS if available

(From OE-Core rev: 0aa24abf6c4d68efa63026d2496b6adc16734d35)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-09-23 20:54:03 +01:00
Ross Burton
12f23b06fc curl: add vendors to CVE_PRODUCT to exclude false positives
To avoid false positives (such as CVE-2010-0734, rubygems:curl), expand
the CVE_PRODUCT list to include all the vendors that have been used.

(From OE-Core rev: bb265122cccea9466405fdd924ad10ce8cda0dec)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-09-08 16:43:40 +01:00
Khem Raj
d416bb3a68 curl: Upgrade to 7.72.0
(From OE-Core rev: f3fc6de9de6b6a24649864c598d5ee9abfae4af3)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-08-21 14:29:11 +01:00
Pierre-Jean Texier
9166fb351e curl: upgrade 7.71.0 -> 7.71.1
This release includes the following bugfixes:

  - cirrus-ci: disable FreeBSD 13 (again)
  - Curl_inet_ntop: always check the return code
  - CURLOPT_READFUNCTION.3: provide the upload data size up front
  - DYNBUF.md: fix a typo: trail => tail
  - escape: make the URL decode able to reject only %00-bytes
  - escape: zero length input should return a zero length output
  - examples/multithread.c: call curl_global_cleanup()
  - http2: set the correct URL in pushed transfers
  - http: fix proxy auth with blank password
  - mbedtls: fix build with disabled proxy support
  - ngtcp2: sync with current master
  - openssl: Fix compilation on Windows when ngtcp2 is enabled
  - Revert "multi: implement wait using winsock events"
  - sendf: improve the message on client write errors
  - terminology: call them null-terminated strings
  - tool_cb_hdr: Fix etag warning output and return code
  - url: allow user + password to contain "control codes" for HTTP(S)
  - vtls: compare cert blob when finding a connection to reuse

(From OE-Core rev: 4fde94448495a7957bb6ce76c15fda67c73248d3)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-07-02 16:18:03 +01:00