Builder curl-unthreaded-solaris10-i386 Build #16474

Results:

Failed runtest

SourceStamp:

Project	curl
Repository	https://github.com/curl/curl.git
Branch	master
Revision	cc5604182a9e6256e8b5bc288c8586a74fb7492b
Got Revision	cc5604182a9e6256e8b5bc288c8586a74fb7492b
Changes	18 changes

BuildSlave:

unstable10x

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-unthreaded-solaris10-i386' triggered this build

Steps and Logfiles:

git update ( 9 secs )
1. stdio
Runtest './tests/testcurl.pl --nogitpull ...' failed ( 4 hrs, 53 mins, 14 secs )
1. stdio
2. resultlog
Mail result 'cat resultlog ...' ( 0 secs )
1. stdio

Build Properties:

Name	Value	Source
branch	master	Build
builddir	/export/home/buildbot/slave/curl-unthreaded-solaris10-i386	slave
buildername	curl-unthreaded-solaris10-i386	Builder
buildnumber	16474	Build
codebase		Build
got_revision	cc5604182a9e6256e8b5bc288c8586a74fb7492b	Git
osplatform	I386	SetPropertyFromCommand Step
osrelease	10	SetPropertyFromCommand Step
project	curl	Build
repository	https://github.com/curl/curl.git	Build
revision	cc5604182a9e6256e8b5bc288c8586a74fb7492b	Build
scheduler	schedule-curl-unthreaded-solaris10-i386	Scheduler
slavename	unstable10x	BuildSlave
workdir	/export/home/buildbot/slave/curl-unthreaded-solaris10-i386	slave (deprecated)

Forced Build Properties:

Name	Label	Value

Responsible Users:

Daniel Stenberg
danielohnoyoudont@haxx.se
Flavio Amieiro
flavioohnoyoudont@amieiro.net
Stefan Eissing
stefanohnoyoudont@eissing.org
Viktor Szakats
commitohnoyoudont@vsz.me
renovate[bot]
29139614+renovate[bot]ohnoyoudont@users.noreply.github.com

Timing:

Start	Tue Mar 17 20:22:07 2026
End	Wed Mar 18 10:54:41 2026
Elapsed	14 hrs, 32 mins, 34 secs

All Changes:

:

Change #261278

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Tue 17 Mar 2026 12:28:58
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	32500f12c444536f2f73b08e678fc67175335cd9

Comments

HTTP3.md: minor improvements
- document building curl with CMake.

- mention all supported forks in the OpenSSL section. Delete dedicated
  quictls section.

- add TLS-backend pkgconfig dir to `PKG_CONFIG_PATH` for correctness.
  OpenSSL-based ones often work without this, by finding system
  `openssl.pc`. For GnuTLS and wolfSSL this has a lesser chance. Best to
  point to them explicitly. (configure may technically be able to do
  this automatically, but it isn't implemented.)

- use `--with-ngtcp2=<path>` again, where possible.
  GnuTLS is the exception, pending fix in #20910.
  Same for BoringSSL, but not documented in `HTTP3.md`.

- replace `<somewhereN>` with `/path/to/depname` for clarity.

- move `LDFLAGS` after `./configure` for curl, to match dep builds.

- move `--with-ngtcp2` next to the TLS-backend option.

Follow-up to 1e3c2bec7eb735736755e15a48701f5b2d5b5979 #20926
Follow-up to 3c64ffaff4cd8c8275627dd2e17b6879a1d32262 #18415 #18188
Cherry-picked from #20920

Closes #20947

Changed files

docs/HTTP3.md

Change #261299

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Tue 17 Mar 2026 13:42:25
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	2e2d021d979c74c44dea30f387459dbfe081c90c

Comments

ftp: do not strdup DATA hostname
Since `newhost` is already allocated, we do not need to strdup()
it. Just assign and NULL the reference.

Closes #20953

Changed files

lib/ftp.c

Change #261307

Category	curl
Changed by	Flavio Amieiro <flavioohnoyoudont@amieiro.net>
Changed at	Tue 17 Mar 2026 14:34:48
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	fa5d2cc97e687ee57a069763a3cce5ae85cee9a8

Comments

curl_ctype.h: fix spelling in a couple of locally used macros
The `ISLOWHEXALHA` and `ISUPHEXALHA` macros were introduced in commit
f65f750 and seem to be only referenced locally by the `ISXDIGIT` macro.

Judging by the `ISALPHA` macro defined in the same file, it seems like
the intention was to spell them as `IS.*HEXALPHA`.

I noticed this while reading through the code and decided to open a PR,
even if it is only a tiny change, just because I was already looking at
it and it might be useful. If there is any reason not to merge this,
please do close the PR.

Closes #20810

Changed files

lib/curl_ctype.h

Change #261308

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Tue 17 Mar 2026 14:36:54
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	3e74a3e0621fdde141b39ad97db88196e0f8999e

Comments

openssl: drop obsolete SSLv2 logic
Closes #20945

Changed files

lib/vtls/openssl.c

Change #261309

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Tue 17 Mar 2026 14:37:53
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	38107d33544f37ccf7bfcd6e82ede079a40c77e8

Comments

configure: fix `--with-ngtcp2=<path>` option for crypto libs
ngtcp2 1.14.0 added module dependencies to `ngtcp2_crypto_*.pc` files.
This broke certain build cases in curl, because configure was is
querying pkg-config modules by setting `PKG_CONFIG_LIBDIR` to the
directory specified via `--with-*=` options, including `--with-ngtcp2=`.
Setting `PKG_CONFIG_LIBDIR` tells pkg-config (and pkgconf) to ignore
system locations. This caused that `ngtcp2_crypto_gnutls.pc` could no
longer find its indirect dependencies, if those were present at system
locations (where they typically are). Another fallout was BoringSSL,
because it does not provide `openssl.pc` on its own, and successful
detection relied on finding a non-BoringSSL copy, typically at a system
location (also fixed in ngtcp2 main branch).

Fix `ngtcp2_crypto_*` detections to not touch `PKG_CONFIG_LIBDIR` and
instead prepend `<path>` set via `--with-ngtcp2=` to `PKG_CONFIG_PATH`.
This ensures to pick up any dependent modules from system locations.

Note the side-effect is that potentially undesired modules may be
detected this way from system locations, i.e. it makes this particular
detection less "hermetic" than the rest used in curl configure.

(Configurations using a bare `--with-ngtcp2` with no path were not
affected, and served as a workaround before this patch. It remains a
valid way of configuration after.)

Both `pkgconf` and `pkg-config` use this logic to calculate their search
directory list:
```pseudo
search = {}
if PKG_CONFIG_PATH is set
  search += PKG_CONFIG_PATH
endif
if PKG_CONFIG_LIBDIR is set (even if empty)
  search += PKG_CONFIG_LIBDIR
else
  search += built-in-pkg-config-dirs
endif
```

Refs:
https://github.com/curl/curl/pull/18028/commits (earlier attempt. Failed due to using `PKG_CONFIG_DIR` instead of the correct `PKG_CONFIG_PATH`)
https://github.com/curl/curl/pull/18028/commits/c0874ce8242d42a1ae1d570d6b70b8360da56482
https://man.archlinux.org/man/pkgconf.1.en
https://manpages.debian.org/unstable/pkgconf/pkgconf.1.en.html
https://manpages.debian.org/unstable/pkg-config/pkg-config.1.en.html
https://github.com/ngtcp2/ngtcp2/commit/10e27fd63cc7dd87236ab15de4a02eca6801e234

Bug: https://github.com/curl/curl/pull/18022#issuecomment-3120587041
Bug: https://github.com/ngtcp2/ngtcp2/pull/1689#issuecomment-3120593664
Follow-up to 04d90b5deb332cd2359d5ba3f71804c55da14397 #20931
Follow-up to 3c64ffaff4cd8c8275627dd2e17b6879a1d32262 #18415 #18188
Follow-up to 99500660af19f89069e71c2251c13963401b3806 #18028 #18022

Closes #20920

Changed files

.github/workflows/http3-linux.yml
acinclude.m4
configure.ac
docs/HTTP3.md

Change #261315

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 14:45:01
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	e894699c1ea4a5e4cf0256fc9eba05a754ab1e58

Comments

strerr: correct the strerror_s() return code condition
In curlx_strerror on Windows, the condition checks `!strerror_s(...)`
(true on success) and therefore always evaluates the fallback block.
Even when strerror_s successfully produced a valid errno message.

Follow-up to 1eca08a54177403205014

Pointed out by Codex Security
Closes #20955

Changed files

lib/curlx/strerr.c

Change #261316

Category	curl
Changed by	renovate[bot] <29139614+renovate[bot]ohnoyoudont@users.noreply.github.com>
Changed at	Tue 17 Mar 2026 14:48:38
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	b881bc0021f8237c0476238ae6c7ac57d94ae2b5

Comments

Dockerfile: update debian:bookworm-slim Docker digest to f065376
Closes #20946

Changed files

Dockerfile

Change #261317

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 14:52:12
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	90b9f514581d671afcf66a59d4041e76f0a82cce

Comments

tool_operate: fix minor memory-leak on early error
When .curlrc is parsed successfully but the tool exits early before
parse_args() executes; the allocated path was not freed.

Spotted by Codex Security

Closes #20954

Changed files

src/tool_operate.c

Change #261324

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Tue 17 Mar 2026 14:53:15
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	91b422d356a52d32708c02514d8ede66363e8847

Comments

pytest: add additional quiche check for flaky test_05_01
As long as stream resets are not visible in the API reliably,
exclude test_05_01, same as test_05_02 already.

Closes #20952

Changed files

tests/http/test_05_errors.py

Change #261325

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 14:55:11
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	1098e1044e6aadb471999c88bd184132c3ebc3d8

Comments

tool_urlglob: fix memory-leak on glob range overflow
Follow-up to 5f273fdddf76544de960b

Pointed out by Codex Security

Closes #20956

Changed files

src/tool_urlglob.c

Change #261326

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Tue 17 Mar 2026 15:01:29
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	aeee5dd616d825fd67b59b5186fcb51b3c081eae

Comments

connection bits: move 'connect_only' here
Move the bit `connection_only` from `connectdata` to `ConnectBits`.
Since we keep all other bits there, seems the correct place.

Closes #20959

Changed files

lib/conncache.c
lib/cshutdn.c
lib/http2.c
lib/multi.c
lib/url.c
lib/urldata.h
lib/vtls/gtls.c
lib/vtls/openssl.c
lib/vtls/wolfssl.c

Change #261330

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Tue 17 Mar 2026 15:32:04
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	f1a5343f5e4ebb611776670759ed373ca1d27501

Comments

urldata: remove trailers_state
It's not used anywhere. Remove `data->state.trailers_state` completely.

Closes #20960

Changed files

lib/urldata.h

Change #261333

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 15:51:43
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	f4c0590b1cd0e8fde56f9ebe460e20846182c91e

Comments

tool_ipfs: accept IPFS gateway URL without set port number
Follow-up to: 56129718b80b5bd5a55

Test 1851 added to verify

Pointed out by Codex Security

Closes #20957

Changed files

src/tool_ipfs.c
tests/data/Makefile.am
tests/data/test1851

Change #261337

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Tue 17 Mar 2026 15:56:02
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	adda11330b379778f2a411236dff7860ae033307

Comments

transfer: enhance secure check
Introduce `Curl_xfer_is_secure(data)` that returns TRUE for transfers
that happen(ed) over a end-to-end secured connection, e.g. SSL.

Add test1586 to verify behaviour for http: transfers via a https: proxy.

Reported-by: lg_oled77c5pua on hackerone

Closes #20951

Changed files

lib/http.c
lib/imap.c
lib/transfer.c
lib/transfer.h
tests/data/Makefile.am
tests/data/test1586

Change #261342

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 16:14:08
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	ae09e5bf0d1f868f7094be8f640ec46d66e668bf

Comments

curl_get_line: error out on read errors
Missing ferror handling in Curl_get_line causes infinite loops on I/O
errors, leading to denial-of-service hangs for config/cache file loads.

Follow-up to 769ccb4d4261a75c8a4

Pointed out by Codex Security

Closes #20958

Changed files

lib/curl_get_line.c

Change #261346

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 16:31:53
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	a46816b4cb7d72dc6cc185a0e1f6e081e44a4d7c

Comments

imap: reset the UIDVALIDITY state between transfers
uidvalidity_set and mb_uidvalidity_set flags were never reset, leaving a
risk for stale UIDVALIDITY state across transfers and mailbox switches.

Follow-up to fb6a4802d7a76d8e36652b

Spotted by Codex Security

Closes #20962

Changed files

lib/imap.c

Change #261351

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 16:51:38
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	a327a5bdedfad6b486bca4e0a1a4fdac9ab298ca

Comments

netrc: refactor into smaller sub functions
Fixes #20950 - test 685 is extended for this
Closes #20932

Changed files

docs/cmdline-opts/netrc.md
docs/libcurl/opts/CURLOPT_NETRC.md
lib/netrc.c
tests/data/test685

Change #261353

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Tue 17 Mar 2026 17:05:15
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	cc5604182a9e6256e8b5bc288c8586a74fb7492b

Comments

RELEASE-NOTES: synced

Changed files

RELEASE-NOTES