Builder wget-solaris10-sparc Build #558

Results:

Failed shell shell_1 shell_2 shell_3

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-wget-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git update ( 47 secs )
   1. stdio
2. shell 'bash bootstrap' failed ( 22 secs )
   1. stdio
3. shell_1 './configure' failed ( 0 secs )
   1. stdio
   2. src/config.h
   3. config.log
4. shell_2 'gmake' failed ( 0 secs )
   1. stdio
5. shell_3 'gmake check' failed ( 0 secs )
   1. stdio
   2. tests-unit-tests.log
   3. tests-test-suite.log
   4. testenv-test-suite.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Samuel Dainard

   sdainardohnoyoudont@amazon.com

Timing:

All Changes:

:

1. Change #271463

   Category	wget
   Changed by	Samuel Dainard <sdainardohnoyoudont@amazon.com>
   Changed at	Wed 17 Jun 2026 14:15:46
   Repository	https://gitlab.com/gnuwget/wget.git
   Project	wget
   Branch	master
   Revision	1be27f6c30aa6c43e09968986965aaab77ba46fa

   Comments

   Fix undefined behavior in is_valid_port
   is_valid_port() uses atoi() which has undefined behavior on integer
   overflow (e.g. input "99999999999"). Since this function is part of
   the CVE-2024-10524 fix and processes untrusted input, replace atoi()
   with strtoul() which sets errno to ERANGE on overflow.
   
   Also add a leading digit check via c_isdigit() to reject inputs that
   don't start with a digit, and remove the separate strspn() call since
   strtoul()'s end pointer provides the same information.
   
   * src/url.c (is_valid_port): Replace atoi with strtoul, add digit
     check, validate via end pointer instead of strspn.
   
   Copyright-paperwork-exempt: Yes

   Changed files

   • src/url.c

2. Change #271464

   Category	wget
   Changed by	Samuel Dainard <sdainardohnoyoudont@amazon.com>
   Changed at	Wed 17 Jun 2026 14:16:21
   Repository	https://gitlab.com/gnuwget/wget.git
   Project	wget
   Branch	master
   Revision	81736a395fdb86d0496b9f5603f9232c72338688

   Comments

   Limit colon search to authority in maybe_prepend_scheme
   maybe_prepend_scheme() uses strchr(url, ':') which finds the first
   colon anywhere in the URL string, including in the path component.
   
   A URL like "www.example.com/path:name" will find the colon in
   "path:name", fail is_valid_port("name"), and return NULL --
   incorrectly refusing to prepend "http://".
   
   Limit the colon search to the authority portion by also finding the
   first slash and ignoring any colon that appears after it.
   
   * src/url.c (maybe_prepend_scheme): Add slash check to ignore colons
     in the path component.
   
   Copyright-paperwork-exempt: Yes

   Changed files

   • src/url.c