                                  _   _ ____  _
                              ___| | | |  _ \| |
                             / __| | | | |_) | |
                            | (__| |_| |  _ <| |___
                             \___|\___/|_| \_\_____|

                                  Changelog

Version 7.46.0 (1 Dec 2015)

Daniel Stenberg (1 Dec 2015)
- RELEASE-NOTES: updated contributor count for 7.46.0

- THANKS: new contributors from the 7.46.0 release

- THANKS-filter: single Tim Rühsen spelling

- docs/examples: gitignore some more built examples

- RELEASE-NOTES; this bug was never released

- RELEASE-NOTES: synced with e55f15454efacb0

- [Flavio Medeiros brought this change]

  Curl_read_plain: clean up ifdefs that break statements
  
  Closes #546

- http2: convert some verbose output into debug-only output

- http2 push: add missing inits of new stream
  
  - set the correct stream_id for pushed streams
  - init maxdownload and size properly

- http2 push: set weight for new stream
  
  give the new stream the old one's stream_weight internally to avoid
  sending a PRIORITY frame unless asked for it

- curl_setup.h: undef freeaddrinfo in c-ares block to fix build
  
  Fixes warnings 78c25c854a added.

- nonblock: fix setting non-blocking mode for Amiga
  
  IoctlSocket() apparently wants a pointer to a long, passed as a char *
  in its third parameter. This bug was introduced already back in commit
  c5fdeef41d from October 1 2001!
  
  Bug: http://curl.haxx.se/mail/lib-2015-11/0088.html
  Reported-by: Norbert Kett

- zsh install: fix DESTDIR support
  
  Reported-by: Mohammad AlSaleh

Dan Fandrich (27 Nov 2015)
- lib: Only define curl_dofreeaddrinfo if struct addrinfo is available

Steve Holme (27 Nov 2015)
- tool_paramhlp: Fixed display of URL index in password prompt for --next
  
  Commit f3bae6ed73 added the URL index to the password prompt when using
  --next. Unfortunately, because the size_t specifier (%zu) is not
  supported by all sprintf() implementations we use the curl_off_t format
  specifier instead. The display of an incorrect value arises on platforms
  where size_t and curl_off_t are of a different size.

Daniel Stenberg (25 Nov 2015)
- timecond: do not add if-modified-since without timecondition
  
  The RTSP code path didn't skip adding the if-modified-since for certain
  RTSP code paths, even if CURLOPT_TIMECONDITION was set to
  CURL_TIMECOND_NONE.
  
  Also, an unknown non-zero CURLOPT_TIMECONDITION value no longer equals
  CURL_TIMECOND_IFMODSINCE.
  
  Bug: http://stackoverflow.com/questions/33903982/curl-timecond-none-doesnt-work-how-to-remove-if-modified-since-header

- RELEASE-NOTES: synced with 99d17a5e2ba77e58

- examples/README: cut out the incomplete list
  
  ... and add a generic explanation for them instead. Each example file
  should contain its own description these days.

- test1513: make sure the callback is only called once

- [Daniel Shahaf brought this change]

  build: Install zsh completion
  
  Fixes #534
  Closes #537

- done: make sure the final progress update is made
  
  It would previously be skipped if an existing error was returned, but
  would lead to a previous value being left there and later used.
  CURLINFO_TOTAL_TIME for example.
  
  Still it avoids that final progress update if we reached DONE as the
  result of a callback abort to avoid another callback to be called after
  an abort-by-callback.
  
  Reported-by: Lukas Ruzicka
  
  Closes #538

- curl: expanded the -XHEAD warning text
  
  ... to also mention the specific options used.

- Revert "cleanup: general removal of TODO (and similar) comments"
  
  This reverts commit 64e959ffe37c436503f9fed1ce2d6ee6ae50bd9a.
  
  Feedback-by: Dan Fandrich
  URL: http://curl.haxx.se/mail/lib-2015-11/0062.html

- CURLOPT_HEADERFUNCTION.3: fix typo
  
  Refer to _HEADERDATA not _WRITEDATA.
  
  Reported-by: Michał Piechowski

- TODO: TCP Fast Open

Steve Holme (22 Nov 2015)
- examples: Added website parse-able descriptions to the e-mail examples

- TODO: Added another 'multi-interface' idea

- smb.c: Fixed compilation warnings
  
  smb.c:134:3: warning: conversion to 'short unsigned int' from 'int' may
               alter its value
  smb.c:146:42: warning: conversion to 'unsigned int' from 'long long
                unsigned int' may alter its value
  smb.c:146:65: warning: conversion to 'unsigned int' from 'long long
                unsigned int' may alter its value

- schannel: Corrected copy/paste error in commit 8d17117683

- schannel: Use GetVersionEx() when VerifyVersionInfo() isn't available
  
  Regression from commit 7a8e861a5 as highlighted in the msys autobuilds.

- examples: Fixed compilation warnings
  
  pop3-multi.c:96:5: warning: implicit declaration of function 'memset'
  imap-multi.c:96:5: warning: implicit declaration of function 'memset'
  http2-download.c:226:5: warning: implicit declaration of function 'memset'
  http2-upload.c:290:5: warning: implicit declaration of function 'memset'
  http2-upload.c:290:5: warning: implicit declaration of function 'memset'

- Makefile.inc: Fixed test run error
  
  test845 not present in tests/data/Makefile.inc

Daniel Stenberg (20 Nov 2015)
- TODO: remove duplicated title

- TODO: added two more libcurl ideas
  
  Moved some ideas from "next major" to just ordinary ideas since we can
  always add new things while keeping the old without doing a "next
  major".

Steve Holme (20 Nov 2015)
- tests: Re-enabled tests 889 and 890 following POP3 fix

- pop3: Differentiate between success and continuation responses

- pop3: Added clarity on some server response codes

Daniel Stenberg (20 Nov 2015)
- [Daniel Shahaf brought this change]

  build: Fix theoretical infinite loops
  
  Add error-checking to 'cd' in a few cases where omitting the checks
  might result in an infinite loop.
  
  Closes #535

Patrick Monnerat (19 Nov 2015)
- curl.h: s/#defien/#define/

- os400: synchronize ILE/RPG header file

- os400: Provide options for libssh2 use in compile scripts. Adjust README.

Daniel Stenberg (19 Nov 2015)
- [danielsh@apache.org brought this change]

  zsh completion: Preserve single quotes in output
  
  When an option's help string contains literal single quotes, those
  single quotes would be stripped from the option's description in the
  completion output (unless the zsh RC_QUOTES option were set while the
  completion function was being sourced, which is not the default).  This
  patch makes the completion output contain single quotes where the --help
  output does.
  
  Closes #532

Jay Satiro (18 Nov 2015)
- [MaxGiting brought this change]

  FAQ: Grammar changes
  
  Closes https://github.com/bagder/curl/pull/533

Daniel Stenberg (17 Nov 2015)
- http2: http_done: don't free already-freed push headers
  
  The push headers are freed after the push callback has been invoked,
  meaning this code should only free the headers if the callback was never
  invoked and thus the headers weren't freed at that time.
  
  Reported-by: Davey Shafik

- [Anders Bakken brought this change]

  getconnectinfo: Don't call recv(2) if socket == -1
  
  Closes #528

- CURLMOPT_PUSHFUNCTION.3: *_byname() returns only the first header
  
  ... if there are more than one using the same name

- http2: minor comment typo

- sasl; fix checksrc warnings

Steve Holme (15 Nov 2015)
- RELEASE-NOTES: Adjusted for the recent OAuth 2.0 activity

- tests: Disabled 889 and 890 until we support POP3 continuation responses
  
  As POP3 final and continuation responses both begin with a + character,
  and both the finalcode and contcode variables in SASLprotoc are set as
  such, we cannot tell the difference between them when we are expecting
  an optional continuation from the server such as the following:
  
  + something else from the server
  +OK final response
  
  Disabled these tests until such a time we can tell the responses apart.

- tests: Corrected typos from commit ba4d8f7eba

- tests: Added OAUTHBEARER failure response tests

- oauth2: Support OAUTHBEARER failures sent as continuation responses
  
  According to RFC7628 a failure message may be sent by the server in a
  base64 encoded JSON string as a continuation response.
  
  Currently only implemented for OAUTHBEARER and not XAUTH2.

Daniel Stenberg (15 Nov 2015)
- RELEASE-NOTES: synced with 808a17ee675

Steve Holme (14 Nov 2015)
- tests: Renamed existing OAuth 2.0 (XOAUTH) tests

- tests: Added OAuth 2.0 (OAUTHBEARER) tests

- oauth2: Added support for OAUTHBEARER SASL mechanism to IMAP, POP3 and SNMP
  
  OAUTHBEARER is now the official "registered" SASL mechanism name for
  OAuth 2.0. However, we don't want to drop support for XOAUTH2 as some
  servers won't support the new mechanism yet.

Daniel Stenberg (13 Nov 2015)
- RELEASE-NOTES: recounted curl_easy_setopt() options

- typecheck-gcc.h: add missing slist-using options
  
  CURLOPT_RESOLVE and CURLOPT_PROXYHEADER were missing
  
  Also sorted the list.

- typecheck-gcc.h: added CURLOPT_CLOSESOCKETDATA
  
  ... and sorted curl_is_cb_data_option alphabetically

Jay Satiro (13 Nov 2015)
- [Sebastian Pohlschmidt brought this change]

  openssl: Free modules on cleanup
  
  Curl_ossl_init calls OPENSSL_load_builtin_modules() but
  Curl_ossl_cleanup doesn't make a call to free these modules.
  
  Bug: https://github.com/bagder/curl/issues/526

Steve Holme (13 Nov 2015)
- symbols-in-versions: Added new CURLOPTTYPE_STRINGPOINT alias
  
  ...following commit aba281e762 to fix test 1119.

Daniel Stenberg (13 Nov 2015)
- curl: mark two more options strings for --libcurl output

- typecheck-gcc.h: add some missing string types
  
  Also sorted that list alphabetically

- curl.h: introducing the STRINGPOINT alias
  
  As an alias for OBJECTPOINT. Provided to allow us to grep for all string
  options easier.

- cleanup: general removal of TODO (and similar) comments
  
  They tend to never get updated anyway so they're frequently inaccurate
  and we never go back to revisit them anyway. We document issues to work
  on properly in KNOWN_BUGS and TODO instead.

- ftplistparser: remove empty function

- openssl: remove #if check for 0.9.7 for ENGINE_load_private_key

- openssl: all supported versions have X509_STORE_set_flags
  
  Simplify by removing #ifdefs and macros

- openssl: remove 0.9.3 check

- openssl: remove #ifdefs for < 0.9.5 support
  
  We only support >= 0.9.7

- lib/vtls/openssl: remove unused traces of yassl ifdefs

Dan Fandrich (12 Nov 2015)
- [dfandrich brought this change]

  unit1603: Demote hash mismatch failure to a warning
  
  The hashes can vary between architectures (e.g. Sparc differs from x86_64).
  This is not a fatal problem but just reduces the coverage of these white-box
  tests, as the assumptions about into which hash bucket each key falls are no
  longer valid.

- [dfandrich brought this change]

  unit1603: Added unit tests for hash functions

- [dfandrich brought this change]

  unit1602: Fixed failure in torture test

Steve Holme (12 Nov 2015)
- sasl: Re-introduced XOAUTH2 in the default enabled authentication mechanism
  
  Following the fix in commit d6d58dd558 it is necessary to re-introduce
  XOAUTH2 in the default enabled authentication mechanism, which was
  removed in commit 7b2012f262, otherwise users will have to specify
  AUTH=XOAUTH2 in the URL.
  
  Note: OAuth 2.0 will only be used when the bearer is specified.

- [Stefan Bühler brought this change]

  sasl_sspi: fix identity memory leak in digest authentication

- [Stefan Bühler brought this change]

  sasl_sspi: fixed unicode build for digest authentication
  
  Closes #525

- oauth2: Re-factored OAuth 2.0 state variable

- sasl: Don't choose OAuth 2.0 if mechanism not advertised
  
  Regression from commit 9e8ced9890 which meant if --oauth2-bearer was
  specified but the SASL mechanism wasn't supported by the server then
  the mechanism would be chosen.

Daniel Stenberg (12 Nov 2015)
- runtests: more compact "System characteristics" output
  
  - no point in repeating curl features that is already listed as features
    from the curl -V output
  
  - remove the port numbers/unix domain path from the output unless
    verbose is used, as that is rarely interesting to users.

- runtests: rename conditional curl-features to $has_[name]

Steve Holme (11 Nov 2015)
- oauth2: Introduced support for host and port details
  
  Added support to the OAuth 2.0 message function for host and port, in
  order to accommodate the official OAUTHBEARER SASL mechanism which is
  to be added shortly.

- curl_setup.h: Removed duplicate CURL_DISABLE_RTSP when HTTP_ONLY defined

- cmake: Add missing feature macros in config header (Part 2)
  
  In addition to commit a215381c94 added the RTSP, RTMP and SMB protocols.

Daniel Stenberg (10 Nov 2015)
- [Douglas Creager brought this change]

  cmake: Add missing feature macros in config header
  
  The curl_config.h file can be generated either from curl_config.h.cmake
  or curl_config.h.in, depending on whether you're building using CMake or
  the autotools.  The CMake template header doesn't include entries for
  all of the protocols that you can disable, which (I think) means that
  you can't actually disable those protocols when building via CMake.
  
  Closes #523

- [Douglas Creager brought this change]

  BoringSSL: Work with stricter BIO_get_mem_data()
  
  BoringSSL implements `BIO_get_mem_data` as a function, instead of a
  macro, and expects the output pointer to be a `char **`.  We have to add
  an explicit cast to grab the pointer as a `const char **`.
  
  Closes #524

- http2: rectify the http2 version #if check
  
  We need 1.0.0 or later. Also verified by configure.

Steve Holme (9 Nov 2015)
- oauth2: Don't use XAUTH2 in OAuth 2.0 function name

- oauth2: Don't use XOAUTH2 in OAuth 2.0 variables

- oauth2: Use OAuth 2.0 rather than XOAUTH2 in comments
  
  When referring to OAuth 2.0 we should use the official name rather the
  SASL mechanism name.

Daniel Stenberg (9 Nov 2015)
- imap: avoid freeing constant string
  
  The fix in 1a614c6c3 was wrong and would leed to free() of a fixed
  string.
  
  Pointed-out-by: Kamil Dudka

- ROADMAP: remove two items already done

- RELEASE-NOTES: synced with 2200bf62054

Jay Satiro (9 Nov 2015)
- acinclude: Remove check for 16-bit curl_off_t
  
  Because it's illogical to check for a 16-bit curl_off_t.
  
  Ref: https://github.com/bagder/curl/issues/425#issuecomment-154964205

Dan Fandrich (8 Nov 2015)
- tool: Fixed a memory leak on OOM introduced in 19cb0c4a

Steve Holme (8 Nov 2015)
- [Justin Ehlert brought this change]

  imap: Don't check for continuation when executing a CUSTOMREQUEST
  
  Bug: https://github.com/bagder/curl/issues/486
  Closes https://github.com/bagder/curl/pull/487

Daniel Stenberg (7 Nov 2015)
- imap: checksrc: remove space after while before paren

- checksrc.whitelist: "missing space after close paren"
  
  ... when it was within a string!

Steve Holme (7 Nov 2015)
- opts: Corrected TLS protocols list to include POP3S rather than POP3

- imap: Quote other 'atom-specials' and not just the space character
  
  Closes #517

- imap: Fixed double quote in LIST command when mailbox contains spaces

Daniel Stenberg (6 Nov 2015)
- imap: fix compiler warning
  
  imap.c:657:13: error: assignment discards 'const' qualifier from pointer
  target type [-Werror=discarded-qualifiers]

Steve Holme (6 Nov 2015)
- imap: Don't call imap_atom() when no mailbox specified in LIST command

Daniel Stenberg (6 Nov 2015)
- curl.1: remove the overlap --range example
  
  ... it is just weird to include by default even if it still works.

- tftp tests: verify sent options too
  
  The tftpd test server now logs all received options and thus all TFTP
  test cases need to match them exactly.
  
  Extended test 283 to use and verify --tftp-blksize.

Jay Satiro (6 Nov 2015)
- getinfo: CURLINFO_ACTIVESOCKET: fix bad socket value
  
  - Set user info param to the socket returned by Curl_getconnectinfo,
  regardless of if the socket is bad. Effectively this means the user info
  param now will receive CURL_SOCKET_BAD instead of -1 on bad socket.
  
  - Remove incorrect comments.
  
  CURLINFO_ACTIVESOCKET is documented to write CURL_SOCKET_BAD to user
  info param but prior to this change it wrote -1.
  
  Bug: https://github.com/bagder/curl/pull/518
  Reported-by: Marcel Raad

Patrick Monnerat (5 Nov 2015)
- curl_ntlm_core: fix 2 curl_off_t constant overflows.

- os400: adjust specific code to support new options.

Daniel Stenberg (2 Nov 2015)
- [Lauri Kasanen brought this change]

  rawstr: Speed up Curl_raw_toupper by 40%
  
  Rationale: when starting up a curl-using app, all cookies from the jar
  are checked against each other. This was causing a startup delay in the
  Fifth browser.
  
  All tests pass.
  
  Signed-off-by: Lauri Kasanen <cand@gmx.com>

- http redirects: %-encode bytes outside of ascii range
  
  Apparently there are sites out there that do redirects to URLs they
  provide in plain UTF-8 or similar. Browsers and wget %-encode such
  headers when doing a subsequent request. Now libcurl does too.
  
  Added test 1138 to verify.
  
  Closes #473

- RELEASE-NOTES: synced with cba5bc585410

- symbols-in-version: add all CURL_HTTPPOST_* symbols

- formadd: support >2GB files on windows
  
  Closes #425

- curl.h: s/HTTPPOST_/CURL_HTTPOST_
  
  Fixes a name space pollution at the cost of programs using one of these
  defines will no longer compile. However, the vast majority of libcurl
  programs that do multipart formposts use curl_formadd() to build this
  list.
  
  Closes #506

- mbedtls: fix "Structurally dead code"
  
  CID 1332129

- mbedtls: fix "Logically dead code"
  
  CID 1332128

- Revert "openssl: engine: remove double-free"
  
  This reverts commit 370ee919b37cc9a46c36428b2bb1527eae5db2bd.
  
  Issue #509 has all the details but it was confirmed that the crash was
  not due to this, so the previous commit was wrong.

- curl.1: -E: s/private certificate/client certificate
  
  ... as the certificate is strictly speaking not private.
  
  Reported-by: John Levon

- openssl: engine: remove double-free
  
  After a successful call to SSL_CTX_use_PrivateKey(), we must not call
  EVP_PKEY_free() on the key.
  
  Reported-by: nased0
  Closes #509

Jay Satiro (27 Oct 2015)
- socks: Fix incorrect port numbers in failed connect messages

Daniel Stenberg (26 Oct 2015)
- DISTRO-DILEMMA: removed
  
  Out of date and not kept accurate. It was sort of a problem of the past
  anyway.

- [xiangbin li brought this change]

  MacOSX-Framework: sdk regex fix for sdk 10.10 and later
  
  closes #507

Jay Satiro (24 Oct 2015)
- build: Fix support for PKG_CONFIG
  
  - Allow the user to use PKG_CONFIG but not PKGCONFIG.
  
  Background:
  
  Last week in 14d5a86 a change was made to allow the user to set the
  PKGCONFIG variable. Today in 72d99f2 I supplemented that to allow the
  more common PKG_CONFIG as an alternative if PKGCONFIG is not set.
  
  Neither of those changes worked as expected because PKGCONFIG is
  occasionally reset in configure and by the CURL_CHECK_PKGCONFIG macro.
  Instead in this commit I take the approach that the user may set
  PKG_CONFIG only.

- build: Fix mingw ssl gdi32 order
  
  - If mingw ssl make sure -lgdi32 comes after ssl libs
  
  - Allow PKG_CONFIG to set pkg-config location and options
  
  Bug: https://github.com/bagder/curl/pull/501
  Reported-by: Kang Lin

Daniel Stenberg (23 Oct 2015)
- RELEASE-NOTES: synced with 03b6e078163f

- polarssl/mbedtls: fix name space pollution
  
  Global private symbols MUST start with Curl_!

- [Dmitry S. Baikov brought this change]

  mbedTLS: THREADING_SUPPORT compilation fix
  
  Closes #505

- test1137: verify --ignore-content-length for FTP

- curl.1: --ignore-content-length now works for FTP too

- [Kurt Fankhauser brought this change]

  ftp: allow CURLOPT_IGNORE_CONTENT_LENGTH to ignore size
  
  This allows FTP transfers with growing (or shrinking) files without
  causing a transfer error.
  
  Closes #480

- CURLOPT_STREAM_WEIGHT.3: call argument 'weight' too
  
  ... and add a little example of what the weight actually means. "Relative
  proportion of bandwidth".

- http2: add stream options to dist and curl_easy_setopt.3

- http2: s/priority/weight

- http2: on_frame_recv: trust the conn/data input
  
  Removed wrong assert()s
  
  The 'conn' passed in as userdata can be used and there can be other
  sessionhandles ('data') than the single one this checked for.

- http2: added three stream prio/deps options
  
  CURLOPT_STREAM_DEPENDS
  
  CURLOPT_STREAM_DEPENDS_E
  
  CURLOPT_STREAM_PRIORITY

- RELEASE-NOTES: synced with ace68fdc0cfed83d

- [m-gardet brought this change]

  mbedtls:new profile with RSA min key len = 1024.
  
  Closes #502

- checksrc: add crude // detection

Jay Satiro (21 Oct 2015)
- [Gisle Vanem brought this change]

  build: fix for MSDOS/djgpp
  
  - Add a VPATH-statement for the vtls/*.c files.
  
  - Due to 'vtls/*.c', remove that subdir part from $(OBJECTS).

Daniel Stenberg (20 Oct 2015)
- copyrights: update Gisle Vanem's email

- vtls: fix compiler warning for TLS backends without sha256
  
  ... noticed with mbedTLS.

- [Jonas Minnberg brought this change]

  vtls: added support for mbedTLS
  
  closes #496

Jay Satiro (19 Oct 2015)
- [Javier G. Sogo brought this change]

  cmake: Fix for add_subdirectory(curl) use-case
  
  - Use CURL_BINARY_DIR instead of CMAKE_BINARY_DIR.
  
  When including CURL using add_subdirectory the variables
  CMAKE_BINARY_DIR and CURL_BINARY_DIR hold different paths.
  
  Closes https://github.com/bagder/curl/pull/488
  Closes https://github.com/bagder/curl/pull/498

Daniel Stenberg (18 Oct 2015)
- RELEASE-NOTES: synced with 4c773bcb474e

- tests/FILEFORMAT: mention PSL as a valid feture to check for
  
  For example in test 1136

- teste1136: only run when PSL is enabled

- curl: slist_wc: remove curl_memory.h inclusion
  
  ... that's for the library only.

- configure: add PSL to the list of features
  
  ... to make test 1014 work again after e77b5b7453.

- [Daniel Hwang brought this change]

  tool: Generate easysrc with last cache linked-list
  
  Using a last cache linked-list improves the performance of easysrc
  generation.
  
  Bug: https://github.com/bagder/curl/issues/444
  Ref: https://github.com/bagder/curl/issues/429
  
  Closes #452

- [Tim Rühsen brought this change]

  cookies: Add support for Mozilla's Publix Suffix List
  
  Use libpsl to check the domain value of Set-Cookie headers (and cookie
  jar entries) for not being a Publix Suffix.
  
  The configure script checks for "libpsl" by default. Disable the check
  with --without-libpsl.
  
  Ref: https://publicsuffix.org/
  Ref: https://github.com/publicsuffix/list
  Ref: https://github.com/rockdaboot/libpsl

- [Richard Hosking brought this change]

  curlbuild.h: Fix non-configure compiling to mips and sh4 targets

- [Anders Bakken brought this change]

  http2: Don't pass unitialized name+len pairs to nghttp2_submit_request
  
  bug introduced by 18691642931e5c7ac8af83ac3a84fbcb36000f96.
  
  Closes #493

Dan Fandrich (16 Oct 2015)
- test1601: fix compilation with --enable-debug and --disable-crypto-auth

Daniel Stenberg (16 Oct 2015)
- multi: fix off-by-one finit[] array size
  
  introduced in c6aedf680f6. It needs to be CURLM_STATE_LAST big since it
  must hande the range 0 .. CURLM_STATE_MSGSENT (18) and CURLM_STATE_LAST
  is 19 right now.
  
  Reported-by: Dan Fandrich
  Bug: http://curl.haxx.se/mail/lib-2015-10/0069.html

- fread_func: move callback pointer from set to state struct
  
  ... and assign it from the set.fread_func_set pointer in the
  Curl_init_CONNECT function. This A) avoids that we have code that
  assigns fields in the 'set' struct (which we always knew was bad) and
  more importantly B) it makes it impossibly to accidentally leave the
  wrong value for when the handle is re-used etc.
  
  Introducing a state-init functionality in multi.c, so that we can set a
  specific function to get called when we enter a state. The
  Curl_init_CONNECT is thus called when switching to the CONNECT state.
  
  Bug: https://github.com/bagder/curl/issues/346
  
  Closes #346

Dan Fandrich (14 Oct 2015)
- test1531: case the size to fix the test on non-largefile builds

Daniel Stenberg (13 Oct 2015)
- acinclude: remove PKGCONFIG override
  
  ... and allow it to get set by a caller easier.
  
  Reported-by: Rainer Jung
  Bug: http://curl.haxx.se/mail/lib-2015-10/0035.html

Dan Fandrich (12 Oct 2015)
- docs/INSTALL: Updated example minimal binary sizes

Daniel Stenberg (11 Oct 2015)
- [Erik Johansson brought this change]

  openssl: Fix set up of pkcs12 certificate verification chain
  
  sk_X509_pop will decrease the size of the stack which means that the loop would
  end after having added only half of the certificates.
  
  Also make sure that the X509 certificate is freed in case
  SSL_CTX_add_extra_chain_cert fails.

- ntlm: error out without 64bit support as the code needs it
  
  It makes it a clearer message for developers reaching that point without
  the necessary support.
  
  Thanks-by: Jay Satiro
  
  Closes #78

- curl_global_init: set the memory function pointers correct
  
  follow-up from 6f8ecea0

- curl_global_init_mem: set function pointers before doing init
  
  ... as in the polarssl TLS backend for example it uses memory functions.

Jay Satiro (9 Oct 2015)
- http2: Fix http2_recv to return -1 if recv returned -1
  
  If the underlying recv called by http2_recv returns -1 then that is the
  value http2_recv returns to the caller.

Daniel Stenberg (8 Oct 2015)
- [Svyatoslav Mishyn brought this change]

  curl_easy_recv.3: CURLINFO_LASTSOCKET => CURLINFO_ACTIVESOCKET
  
  Closes #479

- [Svyatoslav Mishyn brought this change]

  curl_easy_send.3: CURLINFO_LASTSOCKET => CURLINFO_ACTIVESOCKET

- [Svyatoslav Mishyn brought this change]

  CURLOPT_CONNECT_ONLY.3: CURLINFO_LASTSOCKET => CURLINFO_ACTIVESOCKET

- CURLOPT_CERTINFO.3: fix reference to CURLINFO_CERTINFO

- ntlm: get rid of unconditional use of long long
  
  ... since some compilers don't have it and instead use other types, such
  as __int64.
  
  Reported by: gkinseyhpw
  Closes #478

Jay Satiro (8 Oct 2015)
- [Anders Bakken brought this change]

  des: Fix header conditional for Curl_des_set_odd_parity
  
  Follow up to 613e502.

Daniel Stenberg (7 Oct 2015)
- configure: build silently by default
  
  'make V=1' will make the build verbose like before

- bump: start climbing toward 7.46.0

- RELEASE-PROCEDURE: add the github HTTPS download step

Version 7.45.0 (7 Oct 2015)

Daniel Stenberg (7 Oct 2015)
- THANKS: 19 new contributors from the 7.45.0 announcement

- RELEASE-NOTES: synced with 69ea57970080

Jay Satiro (4 Oct 2015)
- getinfo: Fix return code for unknown CURLINFO options
  
  - If a CURLINFO option is unknown return CURLE_UNKNOWN_OPTION.
  
  Prior to this change CURLE_BAD_FUNCTION_ARGUMENT was returned on
  unknown. That return value is contradicted by the CURLINFO option
  documentation which specifies a return of CURLE_UNKNOWN_OPTION on
  unknown.

- [rouzier brought this change]

  hiperfifo: fix the pointer passed to WRITEDATA
  
  Closes https://github.com/bagder/curl/pull/471

- [Maksim Stsepanenka brought this change]

  tool_setopt: fix c_escape truncated octal
  
  Closes https://github.com/bagder/curl/pull/469

Daniel Stenberg (1 Oct 2015)
- [Orange Tsai brought this change]

  gopher: don't send NUL byte
  
  Closes #466

Jay Satiro (29 Sep 2015)
- runtests: Fix pid check in checkdied
  
  Because the 'not' operator has a very low precedence and as a result the
  entire statement was erroneously negated and could never be true.

Daniel Stenberg (30 Sep 2015)
- [Thorsten Schöning brought this change]

  win32: make recent Borland compilers use long long

- RELEASE-NOTES: synced with 69b89050d4

Jay Satiro (28 Sep 2015)
- [Michael Kalinin brought this change]

  openssl: Fix algorithm init
  
  - Change algorithm init to happen after OpenSSL config load.
  
  Additional algorithms may be available due to the user's config so we
  initialize the algorithms after the user's config is loaded.
  
  Bug: https://github.com/bagder/curl/issues/447
  Reported-by: Denis Feklushkin

- [Svyatoslav Mishyn brought this change]

  docs: fix unescaped '\n' in man pages
  
  Closes https://github.com/bagder/curl/pull/459

Daniel Stenberg (27 Sep 2015)
- http2: set TCP_NODELAY unconditionally
  
  For a single-stream download from localhost, we managed to increase
  transfer speed from 1.6MB/sec to around 400MB/sec, mostly because of
  this single fix.

- http2: avoid superfluous Curl_expire() calls
  
  ... only call it when there is data arriving for another handle than the
  one that is currently driving it.
  
  Improves single-stream download performance quite a lot.
  
  Thanks-to: Tatsuhiro Tsujikawa
  Bug: http://curl.haxx.se/mail/lib-2015-09/0097.html

- readwrite_data: set a max number of loops
  
