Builder wget-solaris10-sparc Build #582

Results:

Failed shell shell_1 shell_2 shell_3

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-wget-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git update ( 23 secs )
   1. stdio
2. shell 'bash bootstrap' failed ( 28 secs )
   1. stdio
3. shell_1 './configure' failed ( 0 secs )
   1. stdio
   2. src/config.h
   3. config.log
4. shell_2 'gmake' failed ( 0 secs )
   1. stdio
5. shell_3 'gmake check' failed ( 1 secs )
   1. stdio
   2. tests-unit-tests.log
   3. tests-test-suite.log
   4. testenv-test-suite.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Pratik Farkase

   pratik.farkaseohnoyoudont@est.tech

Timing:

All Changes:

:

1. Change #284435

   Category	wget
   Changed by	Pratik Farkase <pratik.farkaseohnoyoudont@est.tech>
   Changed at	Sat 03 Oct 2026 21:19:33
   Repository	https://gitlab.com/gnuwget/wget.git
   Project	wget
   Branch	master
   Revision	a6d20d8ffa7926ac6e4ad1a1303886a6ace621b0

   Comments

   tests: add regression test for CVE-2026-58470 Content-Range overflow
   parse_content_range() read the Content-Range header's byte offsets and
   entity-length with an unchecked "num = 10 * num + (*hdr - '0')" loop, so
   a server-supplied value exceeding wgint (int64_t) silently wrapped
   around (CVE-2026-58470).  This was fixed by parsing with strtoll() and
   rejecting values that set errno to ERANGE.
   
   Add a case to the existing test_parse_range_header() harness that feeds
   an entity-length larger than int64_t and expects parse_content_range()
   to reject it (shouldPass = false).  Before the fix the function wraps
   the value and returns true, tripping the harness's "False Negative"
   assertion; after the fix it returns false and the test passes.
   
   * src/http.c (test_parse_range_header): Add a test case with an
   entity-length that overflows wgint, expecting rejection.
   
   Signed-off-by: Pratik Farkase <pratik.farkase@est.tech>
   Copyright-paperwork-exempt: Yes

   Changed files

   • src/http.c