Builder curl-unthreaded-solaris10-sparc Build #13135

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-unthreaded-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git update ( 20 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' ( 3 hrs, 32 mins, 7 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Daniel Stenberg

   danielohnoyoudont@haxx.se
2. Stefan Eissing

   stefanohnoyoudont@eissing.org
3. Viktor Szakats

   commitohnoyoudont@vsz.me

Timing:

All Changes:

:

1. Change #229213

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 07 May 2025 23:11:09
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	e522f47986bb72f194636e155191d7dccdc2d4fc

   Comments

   GHA/checksrc: check GHA rules with zizmor
   The pedantic level is experimental. If it causes issues, we may just
   disable it alongside the ignore comments.
   
   Also:
   - silence error:
     ```
      INFO audit: zizmor: completed label.yml
     error[dangerous-triggers]: use of fundamentally insecure workflow trigger
       --> label.yml:13:1
        |
     13 | 'on': [pull_request_target]
        | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ pull_request_target is almost always used insecurely
        |
        = note: audit confidence -> Medium
     ```
   - fix pedantic warning:
     ```
      INFO audit: zizmor: completed label.yml
     warning[excessive-permissions]: overly broad permissions
       --> label.yml:1:1
     ...  |
     24 | |         with:
     25 | |           repo-token: '${{ secrets.GITHUB_TOKEN }}'
        | |____________________________________________________- default permissions used due to no permissions: block
        |
        = note: audit confidence -> Medium
     ```
   - silence `template-injection` false positives like:
     ```
     - note: ${{ matrix.build.torture && 'test-torture' || 'test-ci' }} may expand into attacker-controllable code
     - note: ${{ contains(matrix.build.install_steps, 'pytest') && 'caddy httpd vsftpd' || '' }} may expand into attacker-controllable code
     ```
     It doesn't seem like these could be controlled by an attacker.
     Let me know if I'm missing something.
   
   Closes #17278

   Changed files

   • .github/workflows/checksrc.yml
   • .github/workflows/label.yml
   • .github/workflows/linux.yml
   • .github/workflows/macos.yml
   • .github/workflows/windows.yml

2. Change #229219

   Category	curl
   Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
   Changed at	Thu 08 May 2025 08:16:44
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	d689bd915e3fc270a5434e8df57ec0384113907e

   Comments

   src: rename curlx_safefree to tool_safefree
   It is not part of the curlx function collection, just a macro that might
   as well be a local version.
   
   Closes #17270

   Changed files

   • lib/curlx/curlx.h
   • src/tool_cb_hdr.c
   • src/tool_cfgable.c
   • src/tool_cfgable.h
   • src/tool_doswin.c
   • src/tool_formparse.c
   • src/tool_getparam.c
   • src/tool_ipfs.c
   • src/tool_main.c
   • src/tool_operate.c
   • src/tool_operhlp.c
   • src/tool_parsecfg.c
   • src/tool_urlglob.c

3. Change #229220

   Category	curl
   Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
   Changed at	Thu 08 May 2025 08:17:56
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	40ef77b6dadbd6dbedcd2963fccb817673c430b8

   Comments

   headers: enforce a max number of response header to accept
   The limit is 5000 headers in a single transfer. To avoid problems caused
   by mistakes or malice.
   
   Add test 747 to verify
   
   Reported-by: wolfsage on hackerone
   
   Closes #17281

   Changed files

   • lib/headers.c
   • lib/http.h
   • tests/data/Makefile.am
   • tests/data/test498
   • tests/data/test747

4. Change #229223

   Category	curl
   Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
   Changed at	Thu 08 May 2025 09:30:56
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	f7057760ebaf1fa51a514fd7f12f1ac960aeed3e

   Comments

   telnet: keep protocol struct at easy handle meta
   Remove the member of data->req.p
   
   Closes #17271

   Changed files

   • lib/request.h
   • lib/telnet.c