Buildbot: curl-threaded-solaris10-sparc Build #3648

Results:

Failed runtest

SourceStamp:

Project	curl
Repository	https://github.com/curl/curl.git
Branch	master
Revision	a7d4abb0cfcc5b155174675c51d0edecc15eccbb
Got Revision	a7d4abb0cfcc5b155174675c51d0edecc15eccbb
Changes	8 changes

BuildSlave:

unstable10s

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-threaded-solaris10-sparc' triggered this build

Steps and Logfiles:

git update ( 17 secs )
1. stdio
Runtest './tests/testcurl.pl --nogitpull ...' failed ( 5 hrs, 45 mins, 58 secs )
1. stdio
2. resultlog
Mail result 'cat resultlog ...' ( 0 secs )
1. stdio

Build Properties:

Name	Value	Source
branch	master	Build
builddir	/export/home/buildbot-unstable10s/slave/curl-threaded-solaris10-sparc	slave
buildername	curl-threaded-solaris10-sparc	Builder
buildnumber	3648	Build
codebase		Build
got_revision	a7d4abb0cfcc5b155174675c51d0edecc15eccbb	Git
osplatform	SPARC	SetPropertyFromCommand Step
osrelease	10	SetPropertyFromCommand Step
project	curl	Build
repository	https://github.com/curl/curl.git	Build
revision	a7d4abb0cfcc5b155174675c51d0edecc15eccbb	Build
scheduler	schedule-curl-threaded-solaris10-sparc	Scheduler
slavename	unstable10s	BuildSlave
workdir	/export/home/buildbot-unstable10s/slave/curl-threaded-solaris10-sparc	slave (deprecated)

Forced Build Properties:

Name	Label	Value

Responsible Users:

Aritra Basu
aritrbas+ghohnoyoudont@cisco.com
Daniel Stenberg
danielohnoyoudont@haxx.se
Joshua Rogers
MegaManSecohnoyoudont@users.noreply.github.com
Stefan Eissing
stefanohnoyoudont@eissing.org
tiymat
138939221+tiymatohnoyoudont@users.noreply.github.com

Timing:

Start	Wed May 27 13:24:24 2026
End	Thu May 28 01:22:50 2026
Elapsed	11 hrs, 58 mins, 25 secs

All Changes:

:

Change #268428

Category	curl
Changed by	Aritra Basu <aritrbas+ghohnoyoudont@cisco.com>
Changed at	Wed 27 May 2026 08:49:53
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	e78b1b3eccfa6a2e367a1225ea1b66dafcdac3c4

Comments

HTTP/3: add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
This patch adds two major proxy capabilities to curl (ngtcp2 QUIC):
- HTTP/3 Proxy CONNECT: Tunnel HTTP/1.1 or HTTP/2 traffic through an
  HTTPS proxy that speaks HTTP/3 (QUIC) using the standard CONNECT
  method over an HTTP/3 connection.
- MASQUE CONNECT-UDP: Tunnel HTTP/3 (QUIC) traffic through an HTTP
  proxy (speaking HTTP/1.1, HTTP/2, or HTTP/3) using the extended
  CONNECT method with the CONNECT-UDP protocol (RFC9297 & RFC9298).

Public API additions:
- `CURLPROXY_HTTPS3`: new proxy type constant for HTTP/3 proxy
- `--proxy-http3`: new CLI flag to negotiate HTTP/3 with HTTPS proxy

The implementation adds two new filters:
- `H3-PROXY` - enables negotiating HTTP/3 (QUIC) to the proxy and
  running CONNECT/CONNECT-UDP through that proxy transport.
- `CAPSULE` - dedicated filter inserted between QUIC transport and
  HTTP-PROXY to handle datagram capsule encapsulation/decapsulation.

Here is how the curl filter chaining looks in different scenarios:
- HTTP/3 Proxy CONNECT (tunneling TCP protocols over QUIC proxy):
  conn -> HTTP/1.1 or HTTP/2  -> SSL -> HTTP-PROXY ->
                                 H3-PROXY -> HAPPY-EYEBALLS -> UDP
- MASQUE CONNECT-UDP (tunneling QUIC over any proxy):
  conn -> HTTP/3 -> CAPSULE -> HTTP-PROXY -> H3-PROXY ->
                               HAPPY-EYEBALLS -> UDP
  conn -> HTTP/3 -> CAPSULE -> HTTP-PROXY -> H1-PROXY or H2-PROXY ->
                               SSL -> HAPPY-EYEBALLS -> TCP

- Both features currently require the ngtcp2 QUIC backend.
- Both features are experimental (disabled by default). Enable with
  `--enable-proxy-http3`(autotools) or `-DUSE_PROXY_HTTP3=ON`(CMake).

Tests:
- tests/unit/unit3400.c: Unit tests for capsule protocol encode/decode
- tests/http/test_60_h3_proxy.py: Comprehensive pytest integration suite
- tests/http/testenv/h2o.py: Managing h2o instances with HTTP/1.1, HTTP/2,
  and HTTP/3 (QUIC) listeners, proxy.connect and proxy.connect-udp enabled.

References:
  RFC 9297 - HTTP Datagrams and the Capsule Protocol
  RFC 9298 - Proxying UDP in HTTP
  RFC 9000 §16 — Variable-Length Integer Encoding

Signed-off-by: Aritra Basu <aritrbas+gh@cisco.com>

Closes #21153

Changed files

.github/scripts/pyspelling.words
CMakeLists.txt
configure.ac
docs/EXPERIMENTAL.md
docs/INSTALL-CMAKE.md
docs/cmdline-opts/Makefile.inc
docs/cmdline-opts/proxy-http2.md
docs/cmdline-opts/proxy-http3.md
docs/internals/CONNECTION-FILTERS.md
docs/libcurl/curl_version_info.md
docs/libcurl/opts/CURLOPT_PROXY.md
docs/libcurl/opts/CURLOPT_PROXYTYPE.md
docs/libcurl/symbols-in-versions
docs/options-in-versions
docs/tests/HTTP.md
include/curl/curl.h
lib/Makefile.inc
lib/capsule.c
lib/capsule.h
lib/cf-capsule.c
lib/cf-capsule.h
lib/cf-h1-proxy.c
lib/cf-h1-proxy.h
lib/cf-h2-proxy.c
lib/cf-h2-proxy.h
lib/cf-h3-proxy.c
lib/cf-h3-proxy.h
lib/cf-ip-happy.c
lib/cf-ip-happy.h
lib/connect.c
lib/curl_config-cmake.h.in
lib/curl_trc.c
lib/http.c
lib/http.h
lib/http2.c
lib/http_proxy.c
lib/http_proxy.h
lib/peer.c
lib/peer.h
lib/setopt.c
lib/url.c
lib/version.c
lib/vquic/curl_ngtcp2.c
lib/vquic/curl_ngtcp2.h
lib/vquic/curl_quiche.c
lib/vquic/vquic-tls.c
lib/vquic/vquic.c
lib/vquic/vquic.h
lib/vtls/openssl.c
lib/vtls/vtls.c
lib/vtls/vtls_int.h
src/tool_getparam.c
src/tool_getparam.h
src/tool_listhelp.c
tests/data/Makefile.am
tests/data/test3400
tests/http/CMakeLists.txt
tests/http/Makefile.am
tests/http/config.ini.in
tests/http/conftest.py
tests/http/test_60_h3_proxy.py
tests/http/testenv/curl.py
tests/http/testenv/env.py
tests/http/testenv/h2o.py
tests/unit/Makefile.inc
tests/unit/unit3400.c

Change #268431

Category	curl
Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
Changed at	Wed 27 May 2026 09:01:00
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	f21b5d4e6628370e1400d9503ee243f5150b5cea

Comments

gtls: fix ignored return and uninitialized status in OCSP check
gnutls_ocsp_resp_get_single() was called with (void) discarding its
return value, so a failure (e.g. an OCSP response with no
SingleResponse entries) went undetected.  The following switch() then
read an uninitialized gnutls_ocsp_cert_status_t, which is undefined
behaviour and could yield GNUTLS_OCSP_CERT_GOOD (0) depending on
stack contents, causing gtls_verify_ocsp_status to return CURLE_OK for
a response that was never successfully parsed.

Fix by initializing status to GNUTLS_OCSP_CERT_UNKNOWN and treating a
negative return from gnutls_ocsp_resp_get_single as an error.

Closes #21679

Changed files

lib/vtls/gtls.c

Change #268432

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Wed 27 May 2026 09:06:55
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	23e4bd9602acb8aad0583b88d8b74734d6a31f1b

Comments

RELEASE-NOTES: synced

Changed files

RELEASE-NOTES

Change #268445

Category	curl
Changed by	Daniel Stenberg <danielohnoyoudont@haxx.se>
Changed at	Wed 27 May 2026 09:38:39
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	efdf733baebc475af485b582551844f20bed546b

Comments

gtls: use the correct return code in trace output
Instead of using a hard-coded zero.

Spotted by Copilot

Closes #21766

Changed files

lib/vtls/gtls.c

Change #268446

Category	curl
Changed by	tiymat <138939221+tiymatohnoyoudont@users.noreply.github.com>
Changed at	Wed 27 May 2026 09:39:37
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	a8e6f90a6980a70839823b7fe5f6e0faeeec4833

Comments

urlapi: forbid '|' in host
Closes #21762

Changed files

lib/urlapi.c
tests/libtest/lib1560.c

Change #268449

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Wed 27 May 2026 09:50:34
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	049ec8a3631b72e834a4a87dcd04759885138f7c

Comments

content_encoding: fix limit failure message
The message triggered earlier than intended and did not take the
transfer/content type into account.

Ref #21603
Reported-by: Joshua Rogers
Closes #21756

Changed files

lib/content_encoding.c
tests/data/test387
tests/data/test418

Change #268450

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Wed 27 May 2026 09:52:48
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	1791a087079e90769d52e7a797a59ecaf2d1bd6d

Comments

content_encoding: timeout during slow decoding
Check during transfer/content decoding for every MB or so, if the
transfer has reached its overall time limit. Error out if so.

This is mainly a protectin against compression bombs using way more time
than the transfer is allowed to. Normal compression ratios are unlikely
to benefit as they need more upstream data where the timeout handling is
already in place.

Fixes #21603
Reported-by: Joshua Rogers
Closes #21758

Changed files

lib/content_encoding.c

Change #268459

Category	curl
Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
Changed at	Wed 27 May 2026 10:55:59
Repository	https://github.com/curl/curl.git
Project	curl
Branch	master
Revision	a7d4abb0cfcc5b155174675c51d0edecc15eccbb

Comments

cf-h3-proxy: add SSL flag
Since the proxy filter does TLS, it needs to set the SSL flag.

Follow-up to e78b1b3eccfa6a2e3
Closes #21770

Spotted by Codex Security

Changed files

lib/cf-h3-proxy.c

Builder curl-threaded-solaris10-sparc Build #3648

Results:

SourceStamp:

BuildSlave:

Reason:

Steps and Logfiles:

Build Properties:

Forced Build Properties:

Responsible Users:

Timing:

All Changes:

:

Change #268428

Comments

Changed files

Change #268431

Comments

Changed files

Change #268432

Comments

Changed files

Change #268445

Comments

Changed files

Change #268446

Comments

Changed files

Change #268449

Comments

Changed files

Change #268450

Comments

Changed files

Change #268459

Comments

Changed files