Buildbot: curl-unthreaded-solaris11-sparc Build #5456

Results:

Build successful

SourceStamp:

Project	curl
Repository	https://github.com/curl/curl.git
Branch	master
Revision	030d6aeaf301cf03c322dc8cfbc7fd05018e3d55
Got Revision	030d6aeaf301cf03c322dc8cfbc7fd05018e3d55
Changes	7 changes

BuildSlave:

unstable11s

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-unthreaded-solaris11-sparc' triggered this build

Steps and Logfiles:

git update ( 25 secs )
1. stdio
Runtest './tests/testcurl.pl --nogitpull ...' ( 24 mins, 29 secs )
1. stdio
2. resultlog
Mail result 'cat resultlog ...' ( 0 secs )
1. stdio

Build Properties:

Name	Value	Source
branch	master	Build
builddir	/export/home/buildbot/slave/curl-unthreaded-solaris11-sparc	slave
buildername	curl-unthreaded-solaris11-sparc	Builder
buildnumber	5456	Build
codebase		Build
got_revision	030d6aeaf301cf03c322dc8cfbc7fd05018e3d55	Git
osplatform	SPARC	SetPropertyFromCommand Step
osrelease	11	SetPropertyFromCommand Step
project	curl	Build
repository	https://github.com/curl/curl.git	Build
revision	030d6aeaf301cf03c322dc8cfbc7fd05018e3d55	Build
scheduler	schedule-curl-unthreaded-solaris11-sparc	Scheduler
slavename	unstable11s	BuildSlave
workdir	/export/home/buildbot/slave/curl-unthreaded-solaris11-sparc	slave (deprecated)

Forced Build Properties:

Name	Label	Value

Responsible Users:

Viktor Szakats
commitohnoyoudont@vsz.me

Timing:

Start	Mon Mar 16 12:27:00 2026
End	Mon Mar 16 13:40:56 2026
Elapsed	1 hrs, 13 mins, 55 secs

All Changes:

:

Change #261159

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:30:45
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	6b0a88561106e332773fa676e7949552b0883d3f

Comments

ldap: fix to initialize cleartext connection on Windows
Regression since curl 8.18.0.

Reported-by: Yoshiro Yoneya
Fixes #20927
Follow-up to 39d1976b7f709a516e3243338ebc0443bdd8d56d #19830

Closes #20928

Changed files

lib/ldap.c

Change #261160

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:31:01
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	04d90b5deb332cd2359d5ba3f71804c55da14397

Comments

configure: add option to trace pkg-config detection details
To aid debugging cases when dependency detection acts unexpectedly.
Sprung from spending days trying to figure out behavior of ngtcp2 crypto
modules and their dependencies.

You can enable by setting env `CURL_TRACE_PKG_CONFIG` to a non-empty
value. When enabled, details are logged for both successful and
unsuccessful detections. Logging of unsuccessful ones is automatically
enabled when `CURL_CI` env is set, which is the case for all CI jobs.

It works by asking for `--debug` output and grepping for lines that seem
useful for this purpose. Output is different for classic pkg-config and
pkgconf, and may depending on tool version. Also append `--print-errors`
output if any.

Examples (with pkgconf):

Fail, before:
```
checking for libngtcp2_crypto_boringssl options with pkg-config... no
configure: error: --with-ngtcp2 was specified but could not find ngtcp2_crypto_boringssl pkg-config file.
```

Fail, after:
```
checking for libngtcp2_crypto_boringssl options with pkg-config... no
configure: pkg-config --exists libngtcp2_crypto_boringssl trace:
---- begin
trying path: /home/runner/nghttp3/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/ngtcp2-boringssl/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/nghttp3/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/ngtcp2-boringssl/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/nghttp3/build/lib/pkgconfig for openssl
trying path: /home/runner/ngtcp2-boringssl/build/lib/pkgconfig for openssl
trying path: /home/runner/nghttp2/build/lib/pkgconfig for openssl
==== error:
Package openssl was not found in the pkg-config search path.
Perhaps you should add the directory containing `openssl.pc'
to the PKG_CONFIG_PATH environment variable
Package 'openssl', required by 'libngtcp2_crypto_boringssl', not found
---- end
configure: error: --with-ngtcp2 was specified but could not find ngtcp2_crypto_boringssl pkg-config file.
```

Success, after:
```
checking for libngtcp2_crypto_boringssl options with pkg-config... found
configure: pkg-config --exists libngtcp2_crypto_boringssl trace:
---- begin
trying path: /home/runner/awslc/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/nghttp3/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/nghttp2/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/ngtcp2/build/lib/pkgconfig for libngtcp2_crypto_boringssl
trying path: /home/runner/awslc/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/nghttp3/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/nghttp2/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/ngtcp2/build/lib/pkgconfig for libngtcp2
trying path: /home/runner/awslc/build/lib/pkgconfig for openssl
trying path: /home/runner/awslc/build/lib/pkgconfig for libssl
trying path: /home/runner/awslc/build/lib/pkgconfig for libcrypto
---- end
```

More examples:
https://github.com/curl/curl/pull/20926#issuecomment-4064259935

If there is an externally enablable, built-in feature like this in
classic pkg-config or pkgconf, I could not find it.

Also:
- GHA/http3-linux: set `CURL_TRACE_PKG_CONFIG` to log detection details.
  H3 builds are prone to hard-to-debug dependency issues.

Ref: #20920
Follow-up to 3c64ffaff4cd8c8275627dd2e17b6879a1d32262 #18415 #18188
Follow-up to 99500660af19f89069e71c2251c13963401b3806 #18028 #18022

Cherry-picked from #20926

Closes #20931

Changed files

.github/workflows/http3-linux.yml
acinclude.m4
docs/INSTALL.md

Change #261163

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:49:34
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	6d87eb2878899ec1ccf6b612d950b90367b5ea45

Comments

cmake: add `CURL_GCC_ANALYZER` option, enable in CI, fix/silence
Enable in one existing Linux, macOS and Windows job.

Cost:
- Linux: +1.3 minutes.
- macOS: +1.5 minutes.
- Windows: +2.5 minutes.

Fix or silence issues found:
- conncache: silence NULL deref warning.
  ```
  lib/conncache.c:564:18: warning: dereference of NULL '*data.multi' [CWE-476] [-Wanalyzer-null-dereference]
  ```
  Ref: ede6a8e08762321d95864ad384b8ff5ac44ac459 #19378
- http2: check pointer for NULL.
  ```
  lib/http2.c:388:7: error: dereference of NULL ‘data’ [CWE-476] [-Wanalyzer-null-dereference]
  ```
- http2: silence potential NULL deref in `cf_h2_recv`.
  ```
  lib/http2.c: In function 'cf_h2_recv':
  lib/curl_trc.h:62:15: warning: dereference of NULL 'data' [CWE-476] [-Wanalyzer-null-dereference]
  ```
- openldap: silence deref before NULL check.
  Seen in GHA/Linux.
  ```
  lib/openldap.c: In function ‘oldap_state_mechs_resp’:
  lib/curl_trc.h:140:7: warning: check of ‘data’ for NULL after already dereferencing it [-Wanalyzer-deref-before-check]
  ```
- sendf: silence NULL deref false positive in `Curl_creader_set_fread`.
  It looks impossible to happen.
  ```
  lib/sendf.c:1133:7: warning: dereference of NULL 'r' [CWE-476] [-Wanalyzer-null-dereference]
  ```
- ws: silence deref before NULL check.
  ```
  lib/ws.c: In function 'ws_send_raw_blocking':
  lib/curl_trc.h:205:7: warning: check of 'data' for NULL after already dereferencing it [-Wanalyzer-deref-before-check]
  ```
- var: fix potential NULL deref
  ```
  src/var.c:216:29: warning: dereference of NULL 'envp' [CWE-476] [-Wanalyzer-null-dereference]
  ```
- cli_hx_upload.c: fix NULL check after dereference.
  ```
  tests/libtest/cli_hx_upload.c:170:7: warning: check of '*t.method' for NULL after already dereferencing it [-Wanalyzer-deref-before-check]
  ```
- unit1607, unit1609: fix theoretical NULL ptr dereference.
  ```
  tests/unit/unit1607.c:211:12: warning: dereference of NULL 'addr' [CWE-476] [-Wanalyzer-null-dereference]
  tests/unit/unit1609.c:193:12: warning: dereference of NULL 'addr' [CWE-476] [-Wanalyzer-null-dereference]
  ```
- globally disable checks triggering false positives only:
  ```
  docs/examples/externalsocket.c:135:8: warning: 'connect' on possibly invalid file descriptor 'sockfd' [-Wanalyzer-fd-use-without-check]
  lib/bufq.c:465:16: warning: infinite loop [CWE-835] [-Wanalyzer-infinite-loop] (gcc-15 Windows)
  lib/doh.c:1035:34: warning: stack-based buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] (gcc-15 macOS)
  lib/ftp.c:4022:20: warning: infinite loop [CWE-835] [-Wanalyzer-infinite-loop] (gcc-15 macOS)
  lib/http2.c:689:28: warning: buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds] (gcc-15 macOS)
  lib/socketpair.c:195:5: warning: leak of file descriptor 'curl_dbg_socket(2, 1, 0, 192, "D:/a/curl/curl/lib/socketpair.c")' [CWE-775] [-Wanalyzer-fd-leak]
  src/tool_doswin.c:810:7: warning: leak of file descriptor '*tdata.socket_l' [CWE-775] [-Wanalyzer-fd-leak]
  src/tool_doswin.c:816:9: warning: leak of file descriptor '*tdata.socket_l' [CWE-775] [-Wanalyzer-fd-leak]
  src/tool_main.c:96:1: warning: leak of file descriptor 'fd[0]' [CWE-775] [-Wanalyzer-fd-leak]
  src/tool_main.c:96:1: warning: leak of file descriptor 'fd[1]' [CWE-775] [-Wanalyzer-fd-leak]
  src/tool_urlglob.c:48:17: warning: leak of 'malloc(8)' [CWE-401] [-Wanalyzer-malloc-leak]
  src/tool_writeout.c:870:3: warning: leak of FILE 'stream2' [CWE-775] [-Wanalyzer-file-leak]
  tests/libtest/lib518.c:90:1: warning: leak of FILE [CWE-775] [-Wanalyzer-file-leak]
  tests/libtest/lib537.c:87:1: warning: leak of FILE [CWE-775] [-Wanalyzer-file-leak]
  tests/server/tftpd.c:1147:10: warning: 'bind' on possibly invalid file descriptor 'sock' [-Wanalyzer-fd-use-without-check]
  tests/server/tftpd.c:1155:10: warning: 'bind' on possibly invalid file descriptor 'sock' [-Wanalyzer-fd-use-without-check]
  tests/server/tftpd.c:1259:10: warning: 'connect' on possibly invalid file descriptor '4294967295' [-Wanalyzer-fd-use-without-check]
  ```

Also:
- cmake: update clang-tidy typecheck comment.

Ref: https://gcc.gnu.org/onlinedocs/gcc/Static-Analyzer-Options.html

Closes #20921

Changed files

.github/workflows/linux.yml
.github/workflows/macos.yml
.github/workflows/windows.yml
CMakeLists.txt
docs/INSTALL-CMAKE.md
docs/examples/CMakeLists.txt
lib/CMakeLists.txt
lib/conncache.c
lib/http2.c
lib/openldap.c
lib/sendf.c
lib/ws.c
src/CMakeLists.txt
src/var.c
tests/CMakeLists.txt
tests/libtest/cli_hx_upload.c
tests/unit/unit1607.c
tests/unit/unit1609.c

Change #261167

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:54:43
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	e76968e20dd9ea48220f9c82df50764ab44d7d7c

Comments

curl_get_line: fix potential infinite loop when filename is a directory
Fix potential inifinite loop reading file content with `Curl_get_line()`
when a filename passed via these options are pointing to a directory
entry (on non-Windows):

- `--alt-svc` / `CURLOPT_ALTSVC`
- `-b` / `--cookie` / `CURLOPT_COOKIEFILE`
- `--hsts` / `CURLOPT_HSTS`
- `--netrc-file` / `CURLOPT_NETRC_FILE`

Fix by checking for this condition and silently skipping such filename
without attempting to read content. Add test 1713 to verify.

Mention in cookie documentation as an accepted case, also show a verbose
message when a directory is detected. Extend test 46 to verify if such
failure lets the logic continue to the next cookie file.

Reported-and-based-on-patch-by: Richard Tollerton
Fixes #20823
Closes #20826 (originally-based-on)
Follow-up to 769ccb4d4261a75c8a4236fbe7dc3e27956db1c9 #19140

Closes #20873

Changed files

docs/cmdline-opts/cookie.md
docs/libcurl/opts/CURLOPT_COOKIEFILE.md
lib/altsvc.c
lib/cookie.c
lib/hsts.c
lib/netrc.c
tests/data/Makefile.am
tests/data/test1713
tests/data/test46

Change #261168

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:57:56
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	fad1ebaecc0c489d38c0a9a155f63fdfd9086907

Comments

cmake: resolve imported targets recursively when generating `libcurl.pc`
To allow simplifying the binutils ld hack, by chaining the original
imported target to curl's local duplicate target. Also to allow linking
to dependencies' native imported targets via their CMake Configs, which
will always be hooked up to a `CURL::` interface, and may also be
chained upstream.

Fixing (seen on Linux with simplified binutils hack via #20839):
```
 Requires:
 Requires.private: libzstd openssl zlib
 Libs: -L${libdir} -lcurl
-Libs.private:  -lcrypto -lssl -lz -lzstd
+Libs.private:  -lOpenSSL::Crypto -lZLIB::ZLIB -lcrypto -lssl -lz -lzstd
 Cflags: -I${includedir}
 Cflags.private: -DCURL_STATICLIB
Error: Process completed with exit code
```
Ref: https://github.com/curl/curl/actions/runs/22768301699/job/66041980258?pr=20839

Note this makes it possible to run into an infinite loop because CMake
allows cyclic dependencies. It isn't added by curl's CMake script nor by
any dependencies as defined by default, but may happen in theory with
custom-created targets. In such case CMake automatically stops with
an error at 1000 iterations. I find it overkill to add custom protection
for it.

Cherry-picked from #20814
Cherry-picked from #20839

Closes #20840

Changed files

CMake/Macros.cmake
CMakeLists.txt

Change #261169

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 11:59:59
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	ca92e20123928e4788d27135cdafdd084d3833d4

Comments

mk-ca-bundle.pl: make generated timestamps deterministic
With default invocation, make generated file timestamps deterministic
by looking up (via the GitHub API) the last commit that modified
`certdata.txt`, along with  its commit timestamp.

Also:
- show the URL used to download `certdata.txt` from.
- make `ca-bundle.crt` timestamp match `certdata.txt`'s.

Closes #20528

Changed files

scripts/mk-ca-bundle.pl

Change #261172

Category	curl
Changed by	Viktor Szakats <commitohnoyoudont@vsz.me>
Changed at	Mon 16 Mar 2026 12:05:39
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	030d6aeaf301cf03c322dc8cfbc7fd05018e3d55

Comments

build: include curlx headers directly in src and tests
To include what's actually used.

Also:
- drop unused includes.
- scope includes where possible.
- drop `curlx/curlx.h` umbrella header.
- config2setopts: include `netinet/in.h` for Cygwin/MSYS2.
  Previously included by chance via an unused curlx include.

Closes #20776

Changed files

lib/Makefile.inc
lib/curlx/curlx.h
src/config2setopts.c
src/tool_doswin.c
src/tool_operate.c
src/tool_setup.h
tests/libtest/first.h
tests/server/first.h

Builder curl-unthreaded-solaris11-sparc Build #5456

Results:

SourceStamp:

BuildSlave:

Reason:

Steps and Logfiles:

Build Properties:

Forced Build Properties:

Responsible Users:

Timing:

All Changes:

:

Change #261159

Comments

Changed files

Change #261160

Comments

Changed files

Change #261163

Comments

Changed files

Change #261167

Comments

Changed files

Change #261168

Comments

Changed files

Change #261169

Comments

Changed files

Change #261172

Comments

Changed files