测试 mirror
Go to file
Daniel Stenberg a43ea5943b
http2: clear the h2 session at delete
When calling nghttp2 to delete session, clear the pointer to avoid risk
of UAF.

Pointed out by Codex Security

Closes #20975
2026-03-18 10:34:48 +01:00
.circleci runtests: detect bad libssh differently for test 1459 (fixing CircleCI libssh job) 2025-11-16 23:28:44 +01:00
.github configure: fix --with-ngtcp2=<path> option for crypto libs 2026-03-17 14:37:53 +01:00
CMake cmake: rework binutils ld hack to not read LOCATION property 2026-03-16 13:32:39 +01:00
docs netrc: refactor into smaller sub functions 2026-03-17 16:51:38 +01:00
include RELEASE-NOTES: synced 2026-03-11 08:49:39 +01:00
lib http2: clear the h2 session at delete 2026-03-18 10:34:48 +01:00
LICENSES krb5: drop support for Kerberos FTP 2025-09-20 23:58:28 +02:00
m4 build: drop openssl module dependency for BoringSSL from libcurl.pc 2026-03-17 00:42:41 +01:00
projects generate.bat: remove extra % from VC11 and VC12 runs 2026-03-17 23:39:33 +01:00
scripts top-complexity: prevent filename-based shell injection risk 2026-03-18 10:24:53 +01:00
src tool_formparse: propagate my_get_line errors when reading headers 2026-03-17 23:41:23 +01:00
tests netrc: refactor into smaller sub functions 2026-03-17 16:51:38 +01:00
.clang-tidy.yml tidy-up: miscellaneous 2026-03-09 11:35:19 +01:00
.dir-locals.el copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.editorconfig .editorconfig: add 2025-09-02 08:36:40 +02:00
.git-blame-ignore-revs copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.gitattributes winbuild: MS-DOS batch tidy-ups 2024-07-02 19:26:15 +02:00
.gitignore build: drop the winbuild build system 2025-09-20 01:20:25 +02:00
.mailmap mailmap: Hamza Bensliman 2026-02-26 20:07:23 +01:00
acinclude.m4 configure: fix --with-ngtcp2=<path> option for crypto libs 2026-03-17 14:37:53 +01:00
appveyor.sh tidy-up: miscellaneous 2026-03-09 11:35:19 +01:00
appveyor.yml appveyor: minor improvements [ci skip] 2026-02-27 16:04:21 +01:00
buildconf copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
CHANGES.md CHANGES: fix typo in filename 2026-01-01 12:20:10 +01:00
CMakeLists.txt cmake: document functions used from Windows system DLLs 2026-03-17 22:17:36 +01:00
configure.ac configure: fix --with-ngtcp2=<path> option for crypto libs 2026-03-17 14:37:53 +01:00
COPYING COPYING: bump copyright year range to 1996 - 2026 2026-01-08 23:19:44 +01:00
curl-config.in autotools: tidy-up if expressions 2025-12-10 22:29:19 +01:00
Dockerfile Dockerfile: update debian:bookworm-slim Docker digest to f065376 2026-03-17 14:48:38 +01:00
GIT-INFO.md REUSE: add copyright header to two files 2025-11-03 16:08:52 +01:00
libcurl.pc.in configure: do not echo most inherited LDFLAGS to config files 2024-11-14 09:55:45 +01:00
Makefile.am build: hook up badwords check to lint targets 2026-03-12 01:25:42 +01:00
README BUG-BOUNTY.md: we stop the bug-bounty end of Jan 2026 2026-01-26 08:26:28 +01:00
README.md README: add MQTTS 2026-02-05 22:55:01 +01:00
RELEASE-NOTES RELEASE-NOTES: synced 2026-03-17 17:05:15 +01:00
renovate.json renovate: merge two custom regex rules, escape dots 2026-01-23 15:58:16 +01:00
REUSE.toml badwords: avoid 'simply' 2026-03-10 19:34:06 +01:00
SECURITY.md stop using the word 'just' 2026-03-03 15:30:22 +01:00

curl logo

curl is a command-line tool for transferring data from or to a server using URLs. It supports these protocols: DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS.

Learn how to use curl by reading the man page or everything curl.

Find out how to install curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl man page to learn how.

Open Source

curl is Open Source and is distributed under an MIT-like license.

Contact

Contact us on a suitable mailing list or use GitHub issues/ pull requests/ discussions.

All contributors to the project are listed in the THANKS document.

Commercial support

For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.

Website

Visit the curl website for the latest news and downloads.

Source code

Download the latest source from the Git server:

git clone https://github.com/curl/curl

Security problems

Report suspected security problems privately and not in public.

Backers

Thank you to all our backers 🙏 Become a backer.

Sponsors

Support this project by becoming a sponsor.