Builder curl-unthreaded-solaris11-i386 Build #4771

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-unthreaded-solaris11-i386' triggered this build

Steps and Logfiles:

1. git update ( 3 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' ( 50 mins, 56 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Daniel Stenberg

   danielohnoyoudont@haxx.se
2. Ercan Ermis

   epostaohnoyoudont@ercanermis.com
3. Viktor Szakats

   commitohnoyoudont@vsz.me

Timing:

All Changes:

:

1. Change #261434

   Category	curl
   Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
   Changed at	Wed 18 Mar 2026 11:14:20
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	3f06e27502d616e42e28e3545d2624571a561421

   Comments

   urlapi: make dedotdotify handle leading dots correctly
   Paths starting with one or two leading dots but without a following
   slash were not handled correctly.
   
   Follow-up to c31dd6631f9a0177aa9045cdbb
   
   Extended test 1395 accordingly with a set of new test string.
   
   Reported by Codex Security
   
   Closes #20974

   Changed files

   • lib/urlapi.c
   • tests/unit/unit1395.c

2. Change #261435

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 18 Mar 2026 11:22:23
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	650b33a3dbcb6a48dc52f735401bb75f52bc3121

   Comments

   badwords: pass config as filename arg
   Instead of stdin.
   
   To simplify the command-line, and allow using a safe and portable
   `system()` call from `badwords-all`.
   
   Ref: https://perldoc.perl.org/functions/system
   
   Closes #20970

   Changed files

   • scripts/badwords
   • scripts/badwords-all

3. Change #261436

   Category	curl
   Changed by	Ercan Ermis <epostaohnoyoudont@ercanermis.com>
   Changed at	Wed 18 Mar 2026 11:24:41
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	c3f04e76ae2b1c3ee9283010538769d54a878a59

   Comments

   ftp: reject PWD responses containing control characters
   A malicious or compromised FTP server could include control characters
   (e.g. bare \r, or bytes 0x01-0x1f/0x7f) inside the quoted directory path
   of its 257 PWD response. That string is stored verbatim as
   ftpc->entrypath and later sent unescaped in a CWD command on connection
   reuse via Curl_pp_sendf(), which performs no sanitization before
   appending \r\n.
   
   Reject the entire path if any control character is encountered during
   extraction so that tainted data never reaches a subsequent FTP command.
   
   Add test case 3217 and 3218 to verify. Adjusted test 1152 accordingly.
   
   Closes #20949

   Changed files

   • lib/ftp.c
   • tests/data/Makefile.am
   • tests/data/test1152
   • tests/data/test3217
   • tests/data/test3218

4. Change #261441

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 18 Mar 2026 11:33:37
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	578ee6b79b240a0b41de039913357b100e19283e

   Comments

   gcc: guard `#pragma diagnostic` in core code for <4.6, disable picky warnings
   Extend `#pragma diagnostic push`/`pop` guards to the whole codebase
   (from tests and examples only) to disable it for GCC <4.6. Rename guard
   to `CURL_HAVE_DIAG` and make it include llvm/clang to be interchangeable
   with `__GNUC__ || __clang__` in this context.
   
   The above means no longer disabling certain warnings locally, so pair
   this with disabling all picky warnings for GCC <4.6.
   
   Also:
   - drop global workarounds for misbehaving GCC <4.6 compiler warnings.
     Not needed with picky warnings disabled.
   
   Reported-by: fds242 on github
   Reported-by: Sergey Fedorov
   Thanks-to: Orgad Shaneh
   Follow-up to f07a98ae113b832a8748ba66e1554a7f14c6897e #20366
   Fixes #20892
   Fixes #20924
   Closes #20902
   Closes #20907

   Changed files

   • CMake/PickyWarnings.cmake
   • docs/examples/sendrecv.c
   • lib/content_encoding.c
   • lib/curl_gssapi.c
   • lib/curl_setup.h
   • lib/curlx/snprintf.c
   • lib/ftp.c
   • lib/if2ip.c
   • lib/ldap.c
   • lib/mprintf.c
   • lib/socks_gssapi.c
   • lib/vauth/krb5_gssapi.c
   • lib/vauth/spnego_gssapi.c
   • lib/version.c
   • m4/curl-compilers.m4
   • src/tool_cb_prg.c
   • src/tool_main.c
   • src/tool_writeout.c
   • tests/libtest/first.h
   • tests/libtest/lib557.c
   • tests/server/util.c
   • tests/unit/unit1398.c
   • tests/unit/unit1652.c
   • tests/unit/unit2604.c
   • tests/unit/unit3200.c

5. Change #261442

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 18 Mar 2026 11:37:15
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	c5daffe5f3c0b4a2740d8a77cffd4547617cd51e

   Comments

   delta: avoid potential zero division
   Found by Codex Security
   
   Closes #20977

   Changed files

   • scripts/delta

6. Change #261443

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 18 Mar 2026 11:37:15
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	a3699e8b9eeb3f58949d8c5f5394b215f32092e4

   Comments

   examples/websocket: fix to sleep more on Windows
   Found by Codex Security
   
   Follow-up to d4b85890555388bec212b75f47a5c1a48705b156 #13771
   
   Closes #20978

   Changed files

   • docs/examples/websocket.c

7. Change #261444

   Category	curl
   Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
   Changed at	Wed 18 Mar 2026 11:40:13
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	454db7aeee4114583a26b2c14ebc594028fe6342

   Comments

   badwords: prefer 'null-terminated'
   Aligning with existing text.
   
   Closes #20979

   Changed files

   • docs/examples/log_failed_transfers.c
   • docs/examples/synctime.c
   • docs/internals/BUFREF.md
   • lib/curlx/base64.c
   • lib/http.c
   • lib/transfer.c
   • lib/vtls/mbedtls.c
   • scripts/badwords.txt