Builder curl-unthreaded-solaris10-i386 Build #16642

Results:

Failed runtest

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-unthreaded-solaris10-i386' triggered this build

Steps and Logfiles:

1. git update ( 10 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' failed ( 4 hrs, 58 mins, 6 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Daniel Stenberg

   danielohnoyoudont@haxx.se
2. Jay Satiro

   raysatiroohnoyoudont@yahoo.com
3. Joshua Rogers

   MegaManSecohnoyoudont@users.noreply.github.com
4. Vasiliy-Kkk

   61242428+Vasiliy-Kkkohnoyoudont@users.noreply.github.com
5. Viktor Szakats

   commitohnoyoudont@vsz.me

Timing:

All Changes:

:

1. Change #269182

   Category	curl
   Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
   Changed at	Tue 02 Jun 2026 11:31:46
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	9d19b4730277e94c330d15c4ae2e1cb271514ff7

   Comments

   lib1560: verify a few more URL variations
   Closes #21842

   Changed files

   • tests/data/test1560
   • tests/libtest/lib1560.c

2. Change #269185

   Category	curl
   Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
   Changed at	Tue 02 Jun 2026 11:43:00
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	d191de891a4d2be48908c6964e5cb157d002dae6

   Comments

   telnet: honor CURLOPT_TIMEOUT in send_telnet_data()
   The poll-before-write loop used -1 (infinite) as the Curl_poll timeout,
   so a peer that stops reading could stall the transfer indefinitely,
   bypassing CURLOPT_TIMEOUT. Use Curl_timeleft_ms() instead and return
   CURLE_OPERATION_TIMEDOUT when the deadline is reached or exceeded.
   
   Closes #21685

   Changed files

   • lib/telnet.c

3. Change #269196

   Category	curl
   Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
   Changed at	Tue 02 Jun 2026 13:30:35
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	be6c4ee7faaa55c62567a8c3fb0f4e98a482292e

   Comments

   gtls: verify OCSP response signature in gtls_verify_ocsp_status
   Since aeb1a281ca ("gtls: fix OCSP stapling management"), the function
   parses the stapled OCSP response and reads the certificate status via
   gnutls_ocsp_resp_get_single(), but never calls gnutls_ocsp_resp_verify()
   or gnutls_ocsp_resp_verify_direct(). A response with a forged or
   corrupted signature is accepted without question.
   
   Fix by calling gnutls_ocsp_resp_verify() against the trust list obtained
   from the session credentials immediately after gnutls_ocsp_resp_import().
   This handles both directly-signed responses and delegated OCSP responders
   without requiring the issuer certificate to be present in the peer chain.
   
   The missing check only affects the CURLOPT_SSL_VERIFYSTATUS code path
   when CURLOPT_SSL_VERIFYPEER is disabled. With peer verification enabled,
   gnutls_certificate_verify_peers2() independently catches the invalid
   response via GNUTLS_CERT_INVALID_OCSP_STATUS before
   gtls_verify_ocsp_status() is reached. As a result, no attack is possible
   that is not already trivially achievable without OCSP stapling when peer
   verification is off. This is a correctness and consistency fix, not a
   security vulnerability.
   
   Reported-by: Joshua Rogers
   
   Closes #21677

   Changed files

   • lib/vtls/gtls.c

4. Change #269205

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Tue 02 Jun 2026 15:31:48
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	89683e05b9e0884ccb860a3e01822c20145a12ef

   Comments

   tidy-up: use test/example domains more
   Closes #21849

   Changed files

   • docs/examples/ephiperfifo.c
   • docs/examples/evhiperfifo.c
   • docs/examples/ghiper.c
   • docs/examples/hiperfifo.c
   • tests/data/test536
   • tests/libtest/lib536.c
   • tests/unit/unit2600.c

5. Change #269210

   Category	curl
   Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
   Changed at	Tue 02 Jun 2026 17:01:58
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	a4313f1a98218dd577ee3da5e91ee432727012b6

   Comments

   RELEASE-NOTES: synced

   Changed files

   • RELEASE-NOTES

6. Change #269220

   Category	curl
   Changed by	Jay Satiro <raysatiroohnoyoudont@yahoo.com>
   Changed at	Tue 02 Jun 2026 19:47:01
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	74f18f27a21c08d924dea525dad37fc388b489e0

   Comments

   github: Add AI usage warning to issue, doc and PR templates
   - Explain to contributors that though AI use is acceptable they must
     not file unless they can understand and explain their work without AI.
   
   Assisted-by: Viktor Szakats
   
   Ref: https://github.com/curl/curl/discussions/21792
   
   Closes https://github.com/curl/curl/pull/21801

   Changed files

   • .github/ISSUE_TEMPLATE/bug_report.yml
   • .github/ISSUE_TEMPLATE/docs.yml
   • .github/pull_request_template.md
   • REUSE.toml

7. Change #269222

   Category	curl
   Changed by	Vasiliy-Kkk <61242428+Vasiliy-Kkkohnoyoudont@users.noreply.github.com>
   Changed at	Tue 02 Jun 2026 19:58:21
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	a79467343fa709e6065c16293b79504d234d7311

   Comments

   schannel: use fopen instead CreateFile
   - Refactor CA file reading to use the typical fopen/fread instead of
     CreateFile/ReadFile.
   
   Closes https://github.com/curl/curl/pull/21773

   Changed files

   • lib/vtls/schannel_verify.c