curl/lib
Daniel Stenberg 80a324386b Rene Bernhardt found and fixed a buffer overrun in the NTLM code, where
libcurl always and unconditionally overwrote a stack-based array with 3 zero
bytes. I edited the fix to make it less likely to occur again (and added
a comment explaining the reason to the buffer size).
2004-12-07 23:09:41 +00:00
..
.cvsignore ignore curllib.dsp 2004-08-10 10:43:41 +00:00
amigaos.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
amigaos.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
arpa_telnet.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
base64.c Replaced all uses of sprintf() with the safer snprintf(). It is just a 2004-06-24 11:54:11 +00:00
base64.h killed trailing whitespace 2004-11-29 12:11:46 +00:00
ca-bundle.crt Removed the "TC TrustCenter, Germany, Class 0 CA." certificate: 2003-03-24 11:06:57 +00:00
config-amigaos.h use curl_off_t instead of off_t! 2004-01-22 12:45:50 +00:00
config-mac.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
config-riscos.h David J Meyer's large file support. 2004-01-05 22:29:29 +00:00
config-vms.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
config-win32.h Replace MINGW32 with built-in __MINGW32__. 2004-12-06 14:43:04 +00:00
config-win32ce.h Replace MINGW32 with built-in __MINGW32__. 2004-12-06 14:43:04 +00:00
config.dj alarm() works unreliable on djgpp 2.03. Don't use it. 2004-11-30 14:59:24 +00:00
connect.c Gisle Vanem's fix for better info messages when failing to connect using 2004-12-06 22:45:45 +00:00
connect.h make the SSL connect use the same default connect timeout define as the 2004-06-30 09:22:48 +00:00
content_encoding.c Dan Fandrich's fix for libz 1.1 and "extra field" usage in a gzip stream 2004-11-30 09:44:54 +00:00
content_encoding.h strip trailing whitespace 2004-08-16 13:24:01 +00:00
cookie.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
cookie.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
curllib.dsw Hanno L. Kranzhoff fixed them 2002-06-14 09:36:09 +00:00
curlx.h delete trailing whitespace 2004-05-24 11:57:34 +00:00
dict.c Dan Fandrich: make --disable-dict actually disable dict 2004-11-11 23:13:06 +00:00
dict.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
easy.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
escape.c Variable type cleanups to please the picky MIPSPro compiler. 2004-07-01 08:10:21 +00:00
escape.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
file.c Handle drive-letter on MS-DOS. 2004-11-09 14:57:11 +00:00
file.h initial support for "uploading" to file:// URLs 2004-05-25 21:47:29 +00:00
formdata.c Paul Nolan fix to make libcurl build nicely on Windows CE 2004-11-02 10:12:22 +00:00
formdata.h Allow formposting of files larger than what fits in memory by not reading the 2004-06-14 08:51:43 +00:00
ftp.c CURLFTPSSL_ALL should make sure that the transfer fails if the data connection 2004-12-07 10:00:20 +00:00
ftp.h Curl_done() and the protocol-specific conn->curl_done() functions now all 2004-05-12 12:06:39 +00:00
getenv.c Paul Nolan fix to make libcurl build nicely on Windows CE 2004-11-02 10:12:22 +00:00
getinfo.c CURLINFO_NUM_CONNECTS and more 2004-10-19 15:30:08 +00:00
getinfo.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
hash.c Source cleanups. The major one being that we now _always_ use a Curl_addrinfo 2004-06-24 07:43:48 +00:00
hash.h Source cleanups. The major one being that we now _always_ use a Curl_addrinfo 2004-06-24 07:43:48 +00:00
hostares.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
hostasyn.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
hostip4.c avoid warnings on systems with this member set const 2004-10-06 07:52:20 +00:00
hostip6.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
hostip.c Dan Fandrich fix: eliminates some pedantic CodeWarrior compiler warnings and 2004-11-18 14:04:40 +00:00
hostip.h Gisle cleaned up remaining host resolve re-org issues 2004-06-24 14:39:52 +00:00
hostsyn.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
hostthre.c made the code fit within 80 cols 2004-11-25 16:49:14 +00:00
http_chunks.c The Curl_unencode_XXX_write() function take a ssize_t as third argument, so 2004-05-12 07:54:44 +00:00
http_chunks.h use size_t for the data, but keep the protos use ssize_t to better fit 2004-03-04 15:25:06 +00:00
http_digest.c Dan Fandrich added the --disable-crypto-auth option to configure to allow 2004-11-12 09:18:14 +00:00
http_digest.h return CURLDIGEST_NOMEM when a memory function fails to deliver 2004-05-13 14:14:03 +00:00
http_negotiate.c Enrico Scholz fixed the service name to be uppercase as reported in bug 2004-08-05 18:52:54 +00:00
http_negotiate.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
http_ntlm.c Rene Bernhardt found and fixed a buffer overrun in the NTLM code, where 2004-12-07 23:09:41 +00:00
http_ntlm.h 'authdone' was added to the sessionhandle and thus was removed from the 2004-03-30 06:39:24 +00:00
http.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
http.h HTTP "auth done right". See lib/README.httpauth 2004-11-24 16:11:35 +00:00
if2ip.c Paul Nolan fix to make libcurl build nicely on Windows CE 2004-11-02 10:12:22 +00:00
if2ip.h Source cleanups. The major one being that we now _always_ use a Curl_addrinfo 2004-06-24 07:43:48 +00:00
inet_ntoa_r.h had to add this since it was missing in the system includes! 2000-05-29 22:52:17 +00:00
inet_ntop.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
inet_ntop.h Major hostip.c cleanup and split into multiple files and easier #ifdef 2004-04-26 07:20:11 +00:00
inet_pton.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
inet_pton.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
krb4.c Dan Fandrich added --disable-verbose 2004-11-11 16:34:24 +00:00
krb4.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
ldap.c Paul Nolan fix to make libcurl build nicely on Windows CE 2004-11-02 10:12:22 +00:00
ldap.h no more Curl_ldap_done 2004-05-13 10:38:37 +00:00
libcurl.def cosmetic fix. 2004-08-16 11:09:01 +00:00
libcurl.framework.make Matt Veenstra updated the Mac OS X framework files 2004-01-13 08:04:05 +00:00
libcurl.imp syncronized with libcurl.def. 2004-08-16 11:09:30 +00:00
libcurl.plist Matt Veenstra updated the Mac OS X framework files 2004-01-13 08:04:05 +00:00
libcurl.rc corrected copyright. 2004-06-09 01:15:03 +00:00
llist.c Source cleanups. The major one being that we now _always_ use a Curl_addrinfo 2004-06-24 07:43:48 +00:00
llist.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
Makefile.am Added README.httpauth to the dist 2004-11-16 14:24:54 +00:00
makefile.amiga Diego Casorran's amiga makefiles 2003-12-10 13:54:57 +00:00
Makefile.b32 Static lib is libcurl.lib and import lib libcurl_imp.lib. 2004-11-14 13:48:15 +00:00
makefile.dj changed to use Makefile.inc since Gisle agreed. 2004-07-11 23:43:32 +00:00
Makefile.inc David Phillips' FD_SETSIZE fix 2004-11-19 08:52:33 +00:00
Makefile.m32 Enable >2GB files for MingW. 2004-11-19 15:15:52 +00:00
Makefile.netware Netware target (hosted on Linux gcc) doesn't support 2004-11-12 11:45:05 +00:00
Makefile.riscos David J Meyer's large file support. 2004-01-05 22:29:29 +00:00
Makefile.vc6 add select.obj 2004-11-19 13:45:46 +00:00
md5.c Dan Fandrich added the --disable-crypto-auth option to configure to allow 2004-11-12 09:18:14 +00:00
md5.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
memdebug.c Set errno = ENOMEM on faild countcheck(). 2004-10-13 19:11:46 +00:00
memdebug.h Changes for removing libcurl.def file on Win32. 2004-11-09 14:00:56 +00:00
memory.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
mprintf.c Un-do changes for WinCE; cdecl decoration is not needed. 2004-11-08 14:20:14 +00:00
msvcproj.foot new attempt at an improved DSP-file generation 2004-05-11 07:54:55 +00:00
msvcproj.head new attempt at an improved DSP-file generation 2004-05-11 07:54:55 +00:00
multi.c fix the return code for curl_multi_add_handle() 2004-08-31 06:04:43 +00:00
netrc.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
netrc.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
nwlib.c converted to UNIX format. 2004-06-10 21:20:15 +00:00
parsedate.c if gmtime() returns NULL, this returns -1 to bail out nicely 2004-11-29 08:10:10 +00:00
progress.c As reported in Mandrake's bug tracker bug 12289 2004-11-26 14:33:13 +00:00
progress.h clean up start time and t_startsingle use so that redirect_time works properly 2004-11-15 11:27:03 +00:00
README.ares up-to-date with reality 2004-04-06 07:59:11 +00:00
README.curlx updated with more and new info 2004-04-30 08:51:19 +00:00
README.encoding Dan Fandrich changed CURLOPT_ENCODING to select all supported encodings if 2003-05-12 12:45:14 +00:00
README.httpauth HTTP "auth done right". See lib/README.httpauth 2004-11-24 16:11:35 +00:00
README.memoryleak CURLDEBUG, not MALLOCDEBUG 2003-07-22 10:00:37 +00:00
security.c use curl_strnequal(), not strncasecmp() 2004-10-07 22:56:24 +00:00
security.h removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
select.c Dan Fandrich fix to compile with libc5 2004-11-20 08:57:56 +00:00
select.h Suppress signed vs. unsigned warnings on Win32 2004-11-19 14:38:02 +00:00
sendf.c Fixed so that the final error message is sent to the verbose info "stream" 2004-12-06 23:04:30 +00:00
sendf.h Dan fixed the CURL_DISABLE_VERBOSE_STRINGS stuff for older gcc versions since 2004-11-13 21:57:33 +00:00
setup.h I changed my mind. Remove ioctl() macro in setup.h instead. 2004-11-26 16:08:15 +00:00
share.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
share.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
speedcheck.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
speedcheck.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
ssluse.c Curl_select's timeout arg is an int 2004-11-22 13:28:44 +00:00
ssluse.h curl_socket_t mistakes cleanup 2004-03-10 16:01:47 +00:00
strequal.c removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
strequal.h Changes for removing libcurl.def file on Win32. 2004-11-09 14:00:56 +00:00
strerror.c added missing new error string 2004-11-24 18:25:33 +00:00
strerror.h removed trailing whitespace 2004-10-11 17:26:24 +00:00
strtok.c Dan Fandrich's cleanup patch to make pedantic compiler options cause less 2004-01-29 13:56:45 +00:00
strtok.h updated year in the copyright string 2004-01-07 09:19:33 +00:00
strtoofft.c Use LL suffix for long long constants if the compiler supports it, to prevent 2004-10-10 03:28:51 +00:00
strtoofft.h MSVC uses 'i64' suffix for 64-bit sizes. 2004-10-10 14:08:05 +00:00
telnet.c David Phillips' FD_SETSIZE fix 2004-11-19 08:52:33 +00:00
telnet.h Curl_done() and the protocol-specific conn->curl_done() functions now all 2004-05-12 12:06:39 +00:00
timeval.c Dirk Manske increased the resolution for what the CURLINFO_*_TIME return. 2004-04-09 09:36:31 +00:00
timeval.h delete trailing whitespace 2004-11-04 16:14:33 +00:00
transfer.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
transfer.h HTTP "auth done right". See lib/README.httpauth 2004-11-24 16:11:35 +00:00
url.c Dan Fandrich added the --disable-cookies option to configure to build 2004-12-05 23:59:32 +00:00
url.h I made Curl_done() take a pointer-pointer in the first argument instead, and 2004-05-17 08:05:46 +00:00
urldata.h 'crypto_engine' not used. 2004-12-06 16:36:50 +00:00
version.c to prevent compier warnings, we only declare len if we have code 2004-06-24 14:52:51 +00:00

$Id$
                                  _   _ ____  _     
                              ___| | | |  _ \| |    
                             / __| | | | |_) | |    
                            | (__| |_| |  _ <| |___ 
                             \___|\___/|_| \_\_____|

             How To Track Down Suspected Memory Leaks in libcurl
             ===================================================

Single-threaded

  Please note that this memory leak system is not adjusted to work in more
  than one thread. If you want/need to use it in a multi-threaded app. Please
  adjust accordingly.


Build

  Rebuild libcurl with -DCURLDEBUG (usually, rerunning configure with
  --enable-debug fixes this). 'make clean' first, then 'make' so that all
  files actually are rebuilt properly. It will also make sense to build
  libcurl with the debug option (usually -g to the compiler) so that debugging
  it will be easier if you actually do find a leak in the library.

  This will create a library that has memory debugging enabled.

Modify Your Application

  Add a line in your application code:

       curl_memdebug("filename");

  This will make the malloc debug system output a full trace of all resource
  using functions to the given file name. Make sure you rebuild your program
  and that you link with the same libcurl you built for this purpose as
  described above.

Run Your Application

  Run your program as usual. Watch the specified memory trace file grow.

  Make your program exit and use the proper libcurl cleanup functions etc. So
  that all non-leaks are returned/freed properly.

Analyze the Flow

  Use the tests/memanalyze.pl perl script to analyze the memdump file:

    tests/memanalyze.pl < memdump

  This now outputs a report on what resources that were allocated but never
  freed etc. This report is very fine for posting to the list!

  If this doesn't produce any output, no leak was detected in libcurl. Then
  the leak is mostly likely to be in your code.