Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Builder curl-ares-solaris10-sparc Build #3847

Results:

Exception git

SourceStamp:

Projectcurl
Repositoryhttps://github.com/curl/curl.git
Branchmaster
Revision19b299005fbe2d895f4ad525cfdae62a2220c3ea
Changes23 changes

BuildSlave:

unstable10s

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-ares-solaris10-sparc' triggered this build

Steps and Logfiles:

  1. git git exception ( 0 secs )
    1. - no logs -
  2. setproperty  
    1. - no logs -
  3. setproperty_1  
    1. - no logs -
  4. Runtest  
    1. - no logs -
  5. Mail result  
    1. - no logs -

Build Properties:

NameValueSource
branch master Build
builddir /export/home/buildbot-unstable10s/slave/curl-ares-solaris10-sparc slave
buildername curl-ares-solaris10-sparc Builder
buildnumber 3847 Build
codebase Build
project curl Build
repository https://github.com/curl/curl.git Build
revision 19b299005fbe2d895f4ad525cfdae62a2220c3ea Build
scheduler schedule-curl-ares-solaris10-sparc Scheduler
slavename unstable10s BuildSlave
workdir /export/home/buildbot-unstable10s/slave/curl-ares-solaris10-sparc slave (deprecated)

Forced Build Properties:

NameLabelValue

Responsible Users:

  1. Daniel McCarney
  2. Daniel Stenberg
  3. Max Dymond
  4. Michiel van Slobbe
  5. Sai Harsha
  6. Treston Cuzzort
  7. Viktor Szakats
  8. akashdeshmukh-git
  9. renovate[bot]
  10. trestoncuzzort

Timing:

StartMon Oct 26 23:17:38 2026
EndTue Oct 27 06:15:48 2026
Elapsed6 hrs, 58 mins, 9 secs

All Changes:

:

  1. Change #287695

    Category curl
    Changed by Michiel van Slobbe <michiel.van.slobbeohnoyoudont@gmail.com>
    Changed at Sun 25 Oct 2026 10:12:02
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 1f0346f060ce7635d7c2fc6eb237d9bfe9c9ad95

    Comments

    http: use memchr() in Curl_verify_header
Scanning the header line one byte at a time is slower than three
memchr() calls, which check 16-32 bytes per step. The colon search
usually stops after the header name, and it is now only done for lines
that need it.

Keep reporting whichever error comes first in the line.

Follow-up to f228410f77
Closes #23589

    Changed files

    • lib/http.c

  2. Change #287699

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Sun 25 Oct 2026 11:36:44
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision c190227d9147b980b66b51a6d6a11769330a137c

    Comments

    VULN-DISCLOSURE-POLICY.md: take severity < HIGH to GitHub
This is a first take at documenting the new procedure if we decide to
follow the proposal in #23458 "Every vulnerability report < HIGH is
immediately public"

LOW and MEDIUM vulnerabilities should be taken to GitHub. To reduce load
from the curl security team.

Ref: #23458
Closes #23483

    Changed files

    • .github/ISSUE_TEMPLATE/bug_report.yml
    • .github/scripts/pyspelling.words
    • docs/VULN-DISCLOSURE-POLICY.md

  3. Change #287703

    Category curl
    Changed by Daniel McCarney <danielohnoyoudont@binaryparadox.net>
    Changed at Sun 25 Oct 2026 17:58:43
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 35bb30a835201a81afa582b85e3ac26adbc8dc1b

    Comments

    rustls: reject retries shorter than buffered plaintext
The rustls vTLS backend may accept plaintext but be blocked from writing
the TLS output. In this case we remember how much of the plaintext data
buffer we consumed, and then return CURLE_AGAIN. The caller must then
provide the same data buffer on a subsequent retry. The same API
contract is also required by the OpenSSL backend.

However, if through happenstance (e.g. bugs) the caller provides
a buffer smaller than the already consumed count for the retry, return
an error instead of mangling our accounting. This too matches the
OpenSSL vTLS backend's handling of the situation, including a debug
assertion for the invalid retry since it indicates programmer error.

We do the new check before flushing because while Curl_conn_send already
catches an excessive write count, it only does it after the backend has
flushed and cleared the saved count. Direct Curl_conn_cf_send callers
have no such check. By rejecting the retry early we leave the accounting
intact and return an explicit CURLE_BAD_FUNCTION_ARGUMENT in non-debug
builds, so a correct retry can still succeed.

For calls providing a null/empty buffer we continue to drain the TLS
output without touching the plaintext or clearing the count already
consumed when handling a subsequent retry. Handshake write readiness now
depends only on Rustls' queued TLS output.

Test coverage is added using a real Rustls connection and a lower filter
that blocks output. It covers short retries, moving and extending an
unchanged buffer, partial TLS writes, flush-only calls and fatal output
errors through both origin and proxy TLS filters. The pre-handshake
buffer lets the test exercise this accounting without a server or
certificates. Short-retry error checks run in non-debug builds, since
debug builds assert on them.

Closes #23494

    Changed files

    • lib/vtls/rustls.c
    • tests/data/Makefile.am
    • tests/data/test2640
    • tests/unit/Makefile.inc
    • tests/unit/unit2640.c

  4. Change #287707

    Category curl
    Changed by Daniel McCarney <danielohnoyoudont@binaryparadox.net>
    Changed at Sun 25 Oct 2026 17:58:51
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision bc677a8f16a51e728136eff130509cfac57aad19

    Comments

    docs: clarify WebSocket send retries after CURLE_AGAIN
Document the same-data retry requirement imposed by WebSocket send
bookkeeping.

Also fix the instruction to wait for readability when a send blocks.
Wait for writability, as curl_easy_send does.

    Changed files

    • docs/libcurl/curl_ws_send.md

  5. Change #287711

    Category curl
    Changed by trestoncuzzort <trestoncuzzortohnoyoudont@users.noreply.github.com>
    Changed at Mon 26 Oct 2026 08:26:28
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 2d4493dec1a8eaa0698bbcb878b893788452eebf

    Comments

    tool_parsecfg: count skipped lines in config file line numbers
Since curl 8.13.0, warnings and errors for config files show the wrong
line number when comments or blank lines come before the option.
a7fda9a8f moved the skipping of those lines into my_get_line(), and
parseconfig() only counts the lines it gets back, so an option on line
4 after two comments and a blank line is reported as line 1.

Let my_get_line() count every line it reads, including the skipped
ones, when the caller passes a counter. The other callers pass NULL.

Test 466 checks the line number in a warning after comment lines.

Follow-up to a7fda9a8f47aa7400c2eb2497b0ecf6687eace25 #16590

Closes #23600

    Changed files

    • src/tool_formparse.c
    • src/tool_getparam.c
    • src/tool_parsecfg.c
    • src/tool_parsecfg.h
    • src/tool_ssls.c
    • tests/data/Makefile.am
    • tests/data/test466

  6. Change #287714

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 09:25:27
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision c965bbb53b50864d2d99a105300658b7c82833c7

    Comments

    RELEASE-NOTES: synced

    Changed files

    • RELEASE-NOTES

  7. Change #287715

    Category curl
    Changed by Max Dymond <cmeister2ohnoyoudont@gmail.com>
    Changed at Mon 26 Oct 2026 09:38:02
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 5e396f38bba9736db31dc1714bb78d5210cb882b

    Comments

    sendf: clear reader stack when line-conversion setup fails
Clean up the installed readers in do_init_reader_stack() if adding the
CRLF reader fails. Let Curl_creader_set() rely on that cleanup instead
of freeing the client reader separately.

Add unit3307 to enable allocation failure from the reader length
callback and verify cleanup without depending on allocation ordinals.

Closes #23596

    Changed files

    • lib/sendf.c
    • tests/data/Makefile.am
    • tests/data/test3307
    • tests/unit/Makefile.inc
    • tests/unit/unit3307.c

  8. Change #287716

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 10:50:09
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 269c44ff7326fdda3f0d9def664080d352eb1708

    Comments

    SECURITY-ADVISORY: document some news
- Area
- Original report
- md2vuln.pl

Some further steps towards making the CVE markdowns the single sources
of truth for curl vulnerabilities. The other files should be possible to
generated from the markdowns.

Closes #23605

    Changed files

    • docs/SECURITY-ADVISORY.md

  9. Change #287717

    Category curl
    Changed by Viktor Szakats <commitohnoyoudont@vsz.me>
    Changed at Mon 26 Oct 2026 11:14:28
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 2ac9e4caf7138c9c9150992971530894d7c1e4ba

    Comments

    lib: drop unused `linux/tcp.h`, `netinet/tcp.h` includes
Also add comments saying why they are included.

Ref: 979b012eeb1908e7e3ad13c736fb1dbc73187780 #2056

Closes #23601

    Changed files

    • lib/cf-ip-happy.c
    • lib/cf-socket.c
    • lib/sendf.c
    • lib/setopt.c

  10. Change #287718

    Category curl
    Changed by Viktor Szakats <commitohnoyoudont@vsz.me>
    Changed at Mon 26 Oct 2026 11:14:28
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 5b2951be3377cbd5b876b0f6872e4de35dae9cd6

    Comments

    test466: merge into test459
Follow-up to 2d4493dec1a8eaa0698bbcb878b893788452eebf #23600

Closes #23607

    Changed files

    • tests/data/Makefile.am
    • tests/data/test459
    • tests/data/test466

  11. Change #287719

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 11:15:57
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 6448bd7ec4c29f956a85222489e8a3e3cfd68a36

    Comments

    THANKS-filter: drop "Autofix powered by AI"
That's at best a tool, not a contributor

    Changed files

    • docs/THANKS-filter

  12. Change #287720

    Category curl
    Changed by akashdeshmukh-git <319426432+akashdeshmukh-gitohnoyoudont@users.noreply.github.com>
    Changed at Mon 26 Oct 2026 11:26:04
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 1422236ab5d87ef98452427b6cfb288712e4b182

    Comments

    tool_paramhlp: reject trailing garbage in seconds arguments
secs2ms(), used for --connect-timeout, --expect100-timeout, --max-time,
--retry-delay and --retry-max-time, did not check that the whole
argument was consumed. Values like "10m" or "1.5abc" were silently
accepted as 10 and 1.5 seconds, while str2num() and friends reject such
input.

Also return PARAM_BAD_NUMERIC instead of PARAM_NUMBER_TOO_LARGE when no
digits follow the decimal point, as in "1.".

Unit test 1623 now also checks secs2ms() with valid values and with
trailing garbage.

Closes #23500

    Changed files

    • src/tool_paramhlp.c
    • tests/data/test1623
    • tests/tunit/tool1623.c

  13. Change #287721

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 13:28:22
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 088d59b4ca9049bc9073cb6f2805c98ab2465661

    Comments

    SECURITY: remove a dupe link, drop "confidentiality" mention
- it linked the vulnerability disclosure policy twice

- since we now do some vulnerability reports in public they are not
  always kept confidential

Closes #23608

    Changed files

    • SECURITY.md

  14. Change #287722

    Category curl
    Changed by Treston Cuzzort <tmcuzzortohnoyoudont@gmail.com>
    Changed at Mon 26 Oct 2026 14:31:25
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 64ee53be57de2d01fc328e5d78b7443856e5fee3

    Comments

    tool_progress: count retried transfers once
Only finalize a transfer when it leaves the live list. Reset counters
for retried attempts, preserving downloaded bytes kept by automatic
resumption, and aggregate live expected sizes from the current attempt.
Reset speed history when discarded bytes make progress counters
decrease.

Render the final parallel meter for the libuv path as well. Add
regression tests for discarded downloads, resumed downloads and retried
uploads.

Verified in test 3039, 3040 and 3041

Fixes #23498
Ref: #20696
Closes #23603

    Changed files

    • .github/workflows/linux.yml
    • .github/workflows/macos.yml
    • .mailmap
    • docs/tests/TEST-SUITE.md
    • src/tool_operate.c
    • src/tool_operate.h
    • src/tool_progress.c
    • src/tool_progress.h
    • tests/data/Makefile.am
    • tests/data/test3039
    • tests/data/test3040
    • tests/data/test3041

  15. Change #287723

    Category curl
    Changed by Sai Harsha <ssuryadohnoyoudont@amazon.com>
    Changed at Mon 26 Oct 2026 14:34:38
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 296e40373fd4bbc893b21041f5f1db973efacbd4

    Comments

    libssh: try the agent and default keys when the key file guess fails
Since c7f67be010 the shared Curl_ssh_setup_pkey() points sshc->priv_key
at ~/.ssh/id_rsa when the user named no key file and that file exists.
The libssh backend then treated the guess like a key the user named:
when it did not authenticate, or could not be loaded, public key auth
was over. ssh_userauth_publickey_auto(), which asks ssh-agent and tries
libssh's default key files, was only reached when no such file existed.

Two setups that worked in 8.21.0, and that ssh logs into, failed with
CURLE_LOGIN_DENIED: an unauthorized ~/.ssh/id_rsa next to an authorized
~/.ssh/id_ed25519, and a passphrase-protected ~/.ssh/id_rsa whose
passphrase only the agent knows.

Move the ssh_userauth_publickey_auto() call into its own state,
SSH_AUTH_PKEY_AUTO. When the guessed key file does not authenticate or
cannot be loaded, go there if CURLSSH_AUTH_AGENT is allowed (the
default), otherwise on to the remaining methods as before. A key file
the user named with CURLOPT_SSH_PRIVATE_KEYFILE keeps the old behavior:
it is the only key tried, and a file that cannot be loaded still fails
the transfer. This matches the libssh2 backend, which continues with
the agent after its key file fails.

Follow-up to c7f67be0100967d041450285a30b2bec6cbfad64 #22244

Fixes #23518
Closes #23582

    Changed files

    • lib/vssh/libssh.c
    • lib/vssh/ssh.h
    • lib/vssh/vssh.c

  16. Change #287724

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 14:38:02
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision d2f6fe53ab099ff22df77088fcf9fd8c9d7db47e

    Comments

    THANKS-filter: David H-yan and Treston Cuzzort

    Changed files

    • docs/THANKS-filter

  17. Change #287725

    Category curl
    Changed by Daniel Stenberg <danielohnoyoudont@haxx.se>
    Changed at Mon 26 Oct 2026 14:40:48
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 05374268ccba4e7c7910edd547565cb5dfa56cfc

    Comments

    THANKS-filter: pff, missing Treston in the previous

    Changed files

    • docs/THANKS-filter

  18. Change #287726

    Category curl
    Changed by Michiel van Slobbe <michiel.van.slobbeohnoyoudont@gmail.com>
    Changed at Mon 26 Oct 2026 14:42:21
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision b316b562186ad1a75821a787cb429a3390d7d71b

    Comments

    perf: add wsrecv, a WebSocket receive test
Ref: #23597

    Changed files

    • tests/perf/Makefile.inc
    • tests/perf/README.md
    • tests/perf/wsrecv.c

  19. Change #287727

    Category curl
    Changed by Max Dymond <cmeister2ohnoyoudont@gmail.com>
    Changed at Mon 26 Oct 2026 14:50:05
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision f60b3326d7cf25521990c1b0a8189db55f481b93

    Comments

    smtp: avoid signed overflow in dot-stuffing
Closes #23604

    Changed files

    • lib/smtp.c
    • tests/data/test1520
    • tests/libtest/lib1520.c

  20. Change #287728

    Category curl
    Changed by Viktor Szakats <commitohnoyoudont@vsz.me>
    Changed at Mon 26 Oct 2026 15:24:23
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 1c2a5760ccf612ec7c7923d2597e8b0e35ea6bd0

    Comments

    tool_progress: avoid forward declaration
Follow-up to 64ee53be57de2d01fc328e5d78b7443856e5fee3 #23603

Closes #23610

    Changed files

    • src/tool_progress.c

  21. Change #287729

    Category curl
    Changed by renovate[bot] <29139614+renovate[bot]ohnoyoudont@users.noreply.github.com>
    Changed at Mon 26 Oct 2026 15:24:23
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 1e57baab7e3ebc462577351f96f2c7a78f114673

    Comments

    GHA: update dependency openldap/openldap to v2.7.2
Closes #23611

    Changed files

    • .github/workflows/linux.yml

  22. Change #287730

    Category curl
    Changed by Viktor Szakats <commitohnoyoudont@vsz.me>
    Changed at Mon 26 Oct 2026 17:18:01
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 1f506cdb65e295ffbbf30cb15a33d20104f07c75

    Comments

    GHA/http3-linux: bump to OpenSSL 4.1.0, fix fallout
Also:
- change nghttp2's nghttpx TLS backend to AWS-LC from OpenSSL 4, because
  as of latest 1.70.0, nghttpx does not compile with OpenSSL 4.1.0
  no-deprecated. Fixing:
  ```
      libnghttpx_a-shrpx_live_check.o
  shrpx_tls.cc: In function ‘std::expected<void, nghttp2::Error> shrpx::tls::verify_numeric_hostname(X509*, std::string_view, const nghttp2::Address*)’:
  shrpx_tls.cc:1845:29: error: ‘ASN1_STRING_length’ was not declared in this scope; did you mean ‘ASN1_STRING_set0’?
   1845 |         static_cast<size_t>(ASN1_STRING_length(altname->d.iPAddress));
        |                             ^~~~~~~~~~~~~~~~~~
        |                             ASN1_STRING_set0
  [...]
  ```
  Ref: https://github.com/curl/curl/actions/runs/40331481561/job/121621205483
- drop redundant `http3` string from openssl cache IDs/keys.
- unfold a long line.

Bug: https://github.com/curl/curl/pull/23609#issuecomment-6418252674
Closes #23609

Closes #23612

    Changed files

    • .github/workflows/http3-linux.yml
    • .github/workflows/linux.yml

  23. Change #287731

    Category curl
    Changed by Daniel McCarney <danielohnoyoudont@binaryparadox.net>
    Changed at Mon 26 Oct 2026 22:44:02
    Repository https://github.com/curl/curl.git
    Project curl
    Branch master
    Revision 19b299005fbe2d895f4ad525cfdae62a2220c3ea

    Comments

    ci: rustls-ffi 0.15.6 -> 0.15.7
Closes #23620

    Changed files

    • .github/workflows/linux.yml
BuildBot (0.8.14) working for the OpenCSW Buildbot project.
Page built: Thu 29 Oct 2026 19:59:03 (CET)