Clang's funders have changed since 2010: the companies that built it for large C++ code bases and tooling now write a small share of it, and GPU and accelerator vendors, Red Hat, Intel, and new sponso

Back in August I mentioned the new curl performance tests we have running. I figured it could be apt to return to this topic just to mention some of the initial outcomes. When the team gets a new set of charts, graphs and plots that visualize something, like…

Release presentation At 08:00 UTC (10:00 CEST) of the release day, as the tradition dictates, I do a live-streamed release presentation on Twitch. Made available on YouTube after Numbers the 277th release4 changes42 days (total: 10,929)281 bugfixes (total:…

In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post explains the bug, what the problem can…

Over the last year or so, multiple engineers at Aisle have spent a lot of time and energy while pointing their AI powered tooling at the curl source code. This has resulted in no less than thirty-five published curl vulnerabilities and CVE Ids. Today, we…

Hoehenkirchen, Germany/Amsterdam, Netherlands — October 14, 2026 — Lauterbach and JetBrains have integrated TRACE32® debugging tools with CLion, JetBrains’ professional C and C++ tool. The integration

In a previous post, I discussed the differences between push-based and pull-based customization in the context of trying to implement support for formatting and structured bindings. For those problems, pull-based customization (adding an annotation to a type…