Search
Items tagged with: curl
#curl is used in cars made by...
Audi
Baojun
Bentley
BMW
Buick
Cadillac
Chevrolet
Ford
GMC
Holden
Honda
Hyundai
Kia
Lamborghini
Mazda
Mercedes
Nissan
Opel
Porsche
Renault
Seat
Skoda
Subaru
Suzuki
Tesla
Toyota
Vauxhall
Volkswagen
On this day 26 years ago, we introduced the #curl option -#/--progress-bar when we released curl 5.10
You can now try out the #curl git mirror on @Codeberg: codeberg.org/curl/curl-mirror
Consider it a test pilot for now. We won't do PRs and issues there so there's an obvious risk this will just be too messy...
curl-mirror
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS…Codeberg.org
"Exposure of Hard-coded Private Keys and Credentials in #curl Source Repository"
a "critical" issue.
We have this test suite in git...
Seven years ago I estimated a hundred million cars ran #curl. Eight of the ten biggest car brands used it then. All the top three ones.
It probably means that there are some additional cars using curl now. libcurl really.
daniel.haxx.se/blog/2018/08/12…
A hundred million cars run curl
One of my hobbies is to collect information about where curl is used. The following car brands feature devices, infotainment and/or navigation systems that use curl - in one or more of their models.daniel.haxx.se
After closing the weekend's four new #curl security reports as not applicable, we have now received **thirty-three** submissions since the last confirmed genuine one. Thirty-three ones that were not security problems. (A few of them were proper bugs though.)
I don't think we are ready to make the call just yet, but I suspect our bug bounty's days are numbered.
it is curious how many people feel they need to ask me why #curl is not moving off #GitHub
The cold and boring answer is money. GitHub sponsors us with a crapload of CI infra that there is no other company even close to doing.
So while they may be an AI-first delusional company, they help our project so much more than all other hosting sites combined.
It would be reckless and irresponsible of us to ignore this.
#curl tells the %time - extending -w once more
daniel.haxx.se/blog/2025/08/07…
curl tells the %time
The curl command line option --write-out or just -w for short, is a powerful and flexible way to extract information from transfers done with the tool. It was introduced already back in version 6.5 in the early 2000.daniel.haxx.se
I recently refreshed my #curl vs #wget page. What have I missed? For either tool.
daniel.haxx.se/docs/curl-vs-wg…
curl vs Wget
Documentation and ramblings of Daniel Stenberg, founder and lead developer of curl.daniel.haxx.se
On this day, twenty-five years ago, libcurl was born. The engine from the #curl tool turned into a library so that others could also get internet powers.
The name "libcurl" was picked simply because we couldn't think of a better name and yeah, it is a "curl library"...
libcurl 7.1 was a dot-one release to make sure it would not get confused with one of the many 7.0 beta releases we did prior to the actual release.
One of the first adopters of libcurl was PHP.
libcurl: Reset rewind flag in curl_easy_reset() by oxan · Pull Request #18207 · curl/curl
curl_easy_reset() did not reset the rewind_read flag. This caused any handles that previously had a CURLE_SEND_FAIL_REWIND error to get stuck with that error, failing any subsequent requests, even ...GitHub
Another #curl security report that took some serious mind wrestling and debugging to get to the bottom of.
In the end I deem it not a security vulnerability but you can see how this is not an easy call.
curl disclosed on HackerOne: Use After Free (that leads to...
## Summary: - Use-After-Free vulnerability that leads to arbitrary write/READ YES, I used IA along with mermaind editor (online one) to generate this graph that show these paths for...HackerOne
Also, I made the #curl tool support up to 10000 "globs" per URL. Just keep the total number of URLs they expand to within 64 bits.
(It was more of an accidental follow-up effect as I introduced a growing array to keep them, so the previous fixed-limit array can start much smaller but also grow much larger if wanted.)
Update BINDINGS.md by Qriist · Pull Request #18195 · curl/curl
Add LibQurl to the list of known binding libraries. EDIT: I noticed that my PR comment maaaybe sounds more like an order than the simple description it was intended to be. Sorry! ^^;GitHub
Follow redirects but differently - #curl
daniel.haxx.se/blog/2025/08/06…
Follow redirects but differently
In the early days of curl development we (I suppose it was me personally but let's stick with we so that I can pretend the blame is not all on me) made the possibly slightly unwise decision to make the -X option change the HTTP method for all request…daniel.haxx.se
Output unescaped utf8 x509 issuer/subject DNs by unRob · Pull Request #18171 · curl/curl
What I'm trying to fix: I have certificates where the issuer DN has accented characters (encoded as utf8 strings) and I'd like curl -v to render these characters properly, instead of showin...GitHub
hostip: cache negative name resolves by bagder · Pull Request #18157 · curl/curl
Hold them for half the normal lifetime. Helps when told to transfer N URLs in quick succession that all use the same non-resolving hostname. Done by storing a DNS entry with a NULL pointer for '...GitHub
c10kday - #curl turns 10,000 days old
daniel.haxx.se/blog/2025/08/05…
c10kday
From March 20, 1998 when the first curl release was published, to this day August 5, 2025 is exactly 10,000 days. We call it the curl-10000-day. Or just c10kday. c ten K day. We want to celebrate this occasion by collecting and sharing stories.daniel.haxx.se
curl turns 10,000 days · curl curl · Discussion #17930
On August 5 2025, it is exactly 10,000 days since March 20 1998 when the first curl release was done. For this occasion we want to collect fun, exciting, or interesting stories that involve curl an...GitHub
secs2ms(): Changes to digs[5] and digs sizeof sizeof by Sackzement · Pull Request #18167 · curl/curl
First commit changes this: long val; secs2ms(&val, "1.23456"); // val = 1234 // ok secs2ms(&val, "1.234567"); // val = 1023 // should be 1234 secs2ms(&val, "...GitHub
curl: add --follow by bagder · Pull Request #16543 · curl/curl
Makes curl follow redirects an act on the response code and change a custom method accordingly, contrary to --location. Potential future command line to send QUERY and following a redirect accordin...GitHub
Even happier eyeballs
#curl's connection racing goes next level
daniel.haxx.se/blog/2025/08/04…
Even happier eyeballs
Back in 2012, the Happy Eyeballs RFC 6555 was published. It details how a sensible Internet client should proceed when connecting to a server.daniel.haxx.se
I spent over three hours yesterday debugging the latest #curl hackerone report. I think I understand it now.
Next tricky step is now to assess the security impact. Is there one?
Ubuntu Server 25.10 removes wget from its default installation, in favour of wcurl, a wrapper included with curl.
omgubuntu.co.uk/2025/08/ubuntu…
wget Removed from Ubuntu Server 25.10 Default Install
Ubuntu Server 25.10 removes wget from its default installation, in favour of the wcurl tool. Here's why the change was made and if it'll affect you.Joey Sneddon (OMG! Ubuntu!)
So I'm thinking of adding support for %time{} in #curl's -w function.
One reason for doing this is for users who use -w for logging and want to include the time of the event (post-transfer) in a convenient way.
github.com/curl/curl/pull/1811…
Feel free to share your opinion!
writeout: add %time{} by bagder · Pull Request #18119 · curl/curl
Output the current UTC time using strftime format. %f is an extra curl specific flag to output the microsecond fraction of the current second. TODO decide if we want this at all is the strftime ...GitHub
#curl adds parallel host control
daniel.haxx.se/blog/2025/08/01…
curl adds parallel host control
I'm convinced a lot of people have not yet figured out that curl has supported parallel downloads for six years already by now. Provided a practically unlimited number of URLs, curl can be asked to get them in a parallel fashion.daniel.haxx.se