curl/curl-sigpipe.patch
Pedro Monreal Gonzalez 1b4d5053ee - Update to version 8.10.0:
* Security fixes:
    - [bsc#1230093, CVE-2024-8096] curl: OCSP stapling bypass with GnuTLS
  * Changes:
    - curl: make --rate accept "number of units"
    - curl: make --show-headers the same as --include
    - curl: support --dump-header % to direct to stderr
    - curl: support embedding a CA bundle and --dump-ca-embed
    - curl: support repeated use of the verbose option; -vv etc
    - curl: use libuv for parallel transfers with --test-event
    - vtls: stop offering alpn http/1.1 for http2-prior-knowledge
  * Bugfixes:
    - curl: allow 500MB data URL encode strings
    - curl: warn on unsupported SSL options
    - Curl_rand_bytes to control env override
    - curl_sha512_256: fix symbol collisions with nettle library
    - dist: fix reproducible build from release tarball
    - http2: fix GOAWAY message sent to server
    - http2: improve rate limiting of downloads
    - INSTALL.md: MultiSSL and QUIC are mutually exclusive
    - lib: add eos flag to send methods
    - lib: make SSPI global symbols use Curl_ prefix
    - lib: prefer `CURL_SHA256_DIGEST_LENGTH` over the unprefixed name
    - lib: remove the final strncpy() calls
    - lib: remove use of RANDOM_FILE
    - Makefile.mk: fixup enabling libidn2
    - max-filesize.md: mention zero disables the limit
    - mime: avoid inifite loop in client reader
    - ngtcp2: use NGHTTP3 prefix instead of NGTCP2 for errors in h3 callbacks
    - openssl quic: fix memory leak

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=376
2024-09-11 09:48:55 +00:00

33 lines
912 B
Diff

From 3eec5afbd0b6377eca893c392569b2faf094d970 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 5 Aug 2024 00:17:17 +0200
Subject: [PATCH] sigpipe: init the struct so that first apply ignores
Initializes 'no_signal' to TRUE, so that a call to sigpipe_apply() after
init ignores the signal (unless CURLOPT_NOSIGNAL) is set.
I have read the existing code multiple times now and I think it gets the
initial state reversed this missing to ignore.
Regression from 17e6f06ea37136c36d27
Reported-by: Rasmus Thomsen
Fixes #14344
Closes #14390
---
lib/sigpipe.h | 1 +
1 file changed, 1 insertion(+)
diff --git a/lib/sigpipe.h b/lib/sigpipe.h
index b91a2f51333956..d78afd905d3414 100644
--- a/lib/sigpipe.h
+++ b/lib/sigpipe.h
@@ -39,6 +39,7 @@ struct sigpipe_ignore {
static void sigpipe_init(struct sigpipe_ignore *ig)
{
memset(ig, 0, sizeof(*ig));
+ ig->no_signal = TRUE;
}
/*