curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: Rare crashes when working with HTTP/2

From: Daniel Stenberg via curl-library <>
Date: Thu, 24 Oct 2019 15:15:50 +0200 (CEST)

On Thu, 24 Oct 2019, Rainer Canavan via curl-library wrote:

>> Question to devs: should HTTP/2 be disabled on buggy versions of
>> libnghttp2? I guess it can be done in runtime, since curl already gets
>> libnghttp2 version info.
> I'd say no.

I'm with Rainer on this one.

I think it's important to note that this bug was always there in nghttp2 up
until the fix in 1.32.1 and it didn't hurt anyone for a very long time. This
is just a case of a rarely occuring bug fixed in a third party dependency.

At any given point in time, there are bound to be many such in one or more of
the *30* different third party dependencies curl can be built to use. It just
cannot be our job to dictate for users what specific versions of third party
dependencies that are okay to use.

Everyone who builds and ships curl can of course on their own choice opt to
disable functionality based on the state of the particular third party
libraries and their versions.

  / | Get the best commercial curl support there is - from me
                   | Private help, bug fixes, support, ports, new features
Received on 2019-10-24