1. 08 Aug, 2020 1 commit
  2. 03 Aug, 2020 2 commits
  3. 29 Jul, 2020 1 commit
  4. 27 Jul, 2020 3 commits
  5. 24 Jul, 2020 1 commit
  6. 19 Jul, 2020 2 commits
  7. 12 Jul, 2020 1 commit
  8. 07 Jul, 2020 1 commit
  9. 06 Jul, 2020 4 commits
  10. 05 Jul, 2020 1 commit
  11. 02 Jul, 2020 2 commits
    • Philip Withnall's avatar
      soup-uri: Check string lengths before reading bytes of %-encoded chars · ab859a8a
      Philip Withnall authored
      There are two instances in `SoupURI` where `g_ascii_isxdigit()` is
      called two bytes ahead of the read pointer to check if a %-encoding is
      valid. This is fine when the string being parsed is nul-terminated (as
      the first `g_ascii_isxdigit()` call will safely return `FALSE`), but
      will result in a read off the end of the buffer if it’s
      length-terminated (and doesn’t happen to also be nul-terminated).
      
      Thankfully, that’s not the case in any of the code paths in `SoupURI`
      leading to these two instances, so this is not a security issue.
      
      However, the functions should probably be fixed to do an appropriate
      length check, just in case they get called from somewhere else in
      future.
      
      Spotted by oss-fuzz in oss-fuzz#23815 and oss-fuzz#23818, when it was
      fuzzing the new `GUri` implementation in GLib, which is heavily based
      off this code.
      
      Includes two unit tests which don’t actually trigger the original
      failure (as all strings passed into `SoupURI` are forced to be
      nul-terminated), but would trigger it if the nul termination was not
      present.
      Signed-off-by: Philip Withnall's avatarPhilip Withnall <withnall@endlessm.com>
      ab859a8a
    • Boyuan Yang's avatar
      Update Chinese (China) translation · 7199743b
      Boyuan Yang authored
      7199743b
  12. 29 Jun, 2020 1 commit
  13. 28 Jun, 2020 2 commits
  14. 27 Jun, 2020 3 commits
  15. 26 Jun, 2020 2 commits
  16. 16 Jun, 2020 1 commit
  17. 06 May, 2020 1 commit
    • Ross Burton's avatar
      tests: check for curl at runtime · 4d6630a5
      Ross Burton authored
      Don't use the presence of curl at configure time to decide whether to
      run these tests when installed.
      
      Instead of always respecting HAVE_CURL which makes no sense for the
      installed tests, simply check if curl is present at test runtime and
      skip if not.
      
      Also remove HAVE_CURL from meson.build as this removes all users.
      4d6630a5
  18. 23 Apr, 2020 1 commit
    • Chun-wei Fan's avatar
      soup-brotli-decompressor.h: Fix build on Visual Studio · e5cd9c84
      Chun-wei Fan authored
      A SOUP_AVAILABLE_IN_2_68 (which expands to __dllspec(dllexport) extern
      was missed in the use of G_DECLARE_FINAL_TYPE (SoupBrotliDecompressor...),
      which broke Visual Studio builds because the first prototype of
      soup_brotli_decompressor_get_type() (that results from the
      G_DECLARE_FINAL_TYPE macro) was not marked with __declspec(dllexport)
      but the second one at line 35 is, which Visual Studio does not allow.
      e5cd9c84
  19. 15 Apr, 2020 1 commit
    • Ross Burton's avatar
      tests: always install test data · 0232368c
      Ross Burton authored
      The files test-cert.pem, test-key.pem, and index.txt are used in several
      tests, not just the ones using Apache:
      
      ross@bob /usr/libexec/installed-tests/libsoup-2.4 $ ./chunk-test
      Unable to create server: Failed to open file “./test-key.pem”: No such
      file or directory
      
      Always install these files if installed tests are enabled, not just when
      apache tests are enabled.
      0232368c
  20. 11 Mar, 2020 1 commit
    • Simon McVittie's avatar
      test-utils: Clarify meaning of an environment variable · 3058a0ed
      Simon McVittie authored
      SOUP_TESTS_IN_MAKE_CHECK used to be used for the Autotools build system.
      I mistakenly thought it was a way to skip the Apache-dependent tests
      during `make check`, but in fact the Autotools build system used to
      start a single instance of Apache, then run all the tests against that
      single instance, and finally shut it down.
      
      This mechanism is currently unused, but resurrecting it might be one way
      to avoid #175.
      3058a0ed
  21. 07 Mar, 2020 1 commit
  22. 04 Mar, 2020 2 commits
  23. 22 Feb, 2020 1 commit
  24. 18 Feb, 2020 1 commit
  25. 17 Feb, 2020 1 commit
  26. 14 Feb, 2020 1 commit
  27. 03 Feb, 2020 1 commit