Re: [MERGE] Initial netfilter mark patch for comment

[Amos Jeffries]

On Mon, 02 Aug 2010 00:47:15 +0100, Andrew Beverley 
wrote:
> Please find attached the first version of the netfilter mark patch. I've
> not yet tested it extensively, but would welcome some initial feedback
> or comments.
> 
> My comments are:
> 
> - The existing TOS patch cannot be disabled at runtime. As such, this
> mark patch cannot be either. Would it be preferable to only enable them
> both if the qos_flows config option is present? This would also have the
> advantage of being able to add CAP_NET_ADMIN as appropriate at runtime.
> 
> - I have used sscanf instead of strtoul for both TOS and MARK in
> QosConfig.cc (sscanf doesn't auto-detect the format of unsigned long
> int). As a result, the tos variable could be changed to type char, which
> is what it should be in my opinion. Should I do this?
> 
> - The code in forward.cc to obtain all the data needed to locate the
> connection information is messy. Is there a better way to achieve it?
> Conntrack needs to be passed local and remote port numbers and IP
> addresses.
> 

The mess around local port can be cleaned up (see comments below). The
remote ip:port mess seems as clean as it can be in the current code.

> 
> Is it too late to get this in v3.2? I will update the appropriate
> release-notes once I know.

Not too late. This can come under a header of polish on the existing QoS
feature. We have a a bit more flexibility on that kind of change.

The changes to qos_flows needs to be mentioned in section 3.2 "changes to
existing tags" and the --with option to section 4.2 "new ./configure
options". Both are alphabetical lists.


Audit Results:

configure.in: chunk line 2087
 * "QOS netfilter marking enabled: $with_netfilter_conntrack" if ZPH QoS
is enabled, but regardless of whether NFMARK was defined.
  The notice needs to be inside the top part of your inner if statement.

 * Please also add an
AC_CHECK_HEADERS([libnetfilter_conntrack/libnetfilter_conntrack.h
libnetfilter_conntrack/libnetfilter_conntrack_tcp.h])
 That way you can error-out early in the ./configure build process with a
useful AC_MSG_ERROR() and also wrap the headers in forward.cc according to
squid coding style.
 NP: this check is also one that can be cached AC_CHECK_CACHED() I think.

src/cf.data.pre typo:
"in the case of TOS preservation require your kernel to be patch with"
 ==> s /patch/patched/

src/comm.cc:
 * Please use DBG_IMPORTANT instead of '1' and '0' in debugs. Also, IMO
both should indicate "WARNING:", unless the one currently logged at level 1
is common and trivial, in which case it should be dropped to level 2+.

The CRITICAL level as much as possible should be restricted to "ERROR:"
(serious but recoverable or only affecting this users request) and "FATAL:"
(non-recoverable, Squid about to shutdown).
The IMPORTANT level should be "WARNING:" and similar. Stuff that can be
administratively fixed etc.


src/forward.cc:
 * Wrap system includes in "#if HAVE_*"
  ** also they appear to be duplicate included in forward.h and
forward.cc, please only include in the forward.h.

 * Please remove the "defined(_SQUID_LINUX_)" around getNfctMark. We build
on non-linux systems with possible netfilter support (kFreeBSD and hurd).

 * our source format requires function result type to be on a separate
line in .cc:
 +int
 +FwdState::getNfctMark

 * also related to the above. The old ZPH TOS _SQUID_LINUX_ wrapper was
only there due to the preserve-miss patch being linux kernel specific. I
think your new preserve for marks not depending on kernel patching is
likely not to need it, so the wrapping there can be re-worked a bit to only
depend on USE_ZPH_QOS and USE_QOS_NFMARK. If you make this change the docs
will also need updating.

 * You run the sequence:
+serv_fde_local_conn.InitAddrInfo(addr);
+serv_fde_local_conn.FreeAddrInfo(addr);
+serv_fde_local_conn.GetAddrInfo(addr);

 ** The GetAddrInfo allocates dynamic memory and needs to be paired with a
FreeAddrInfo() of its own.
 ** The structures created locally by Init inside addr should be able to
be used throughout the sequence. Unless there is some garbage produced by
getaddrinfo() please remove the Get and move the Free down below where you
are finished with the addr variable and it's content:

+serv_fde_local_conn.FreeAddrInfo(addr);
+} else {
+debugs(17, 1, "Failed to allocate new conntrack");

 * 

 * following nfct_query() you can output serv_fde_local_conn directly in
the debugs() argument instead of fiddling with inet_ntop to find its
content. That will handle all the display mess and output src ip:port as a
twinned pair. If the debugs result shows no port it means there was none
set.

 * again with the debugs level s/1/DBG_IMPORTANT/ and tagged "WARNING:" if
it's an error important message. Or bump to level 2+ if its not.

src/ip/QosConfig.cc:
 * Ip::Qos::QosConfig::parseConfigLine again with the s/0/DBG_CRITICAL/.
This one I think will screw up TOS settings

Re: Compliance: Improved HTTP Range header field validation.

[Amos Jeffries]

On Sun, 01 Aug 2010 15:04:56 -0600, Alex Rousskov
 wrote:
> Compliance: Improved HTTP Range header field validation.
> 
> 1) Improve HttpHdrRangeSpec::parseInit() to parse syntactically valid 
> range specs:
> 
> * Suffix ranges with 0 length (i.e. -0), are syntactically valid.
> 
> * Check that last-byte-pos is greater than or equal to first-byte-pos.
> 
> After the change, HttpHdrRangeSpec::parseInit() successfully parses 
> suffix ranges with 0 length. They were rejected before. RFC 2616 section

> 14.35.1 says such range specs are syntactically valid but unsatisfiable.

> Thus, we should ignore the range spec itself, but not the whole range 
> header. These range specs will be rejected later, during canonization.
> 
> 
> 2) In HttpHdrRangeSpec::parseInit(), ignore the whole range header if 
> one of range specs is syntactically invalid (i.e. range spec parsing
> fails).
> 
> Co-Advisor test case: test_clause/rfc2616/invalidRange
> 
> 
> Please review.
> 
> Thank you,
> 
> Alex.

+1.

Amos

[MERGE] Initial netfilter mark patch for comment

[Andrew Beverley]

Please find attached the first version of the netfilter mark patch. I've
not yet tested it extensively, but would welcome some initial feedback
or comments.

My comments are:

- The existing TOS patch cannot be disabled at runtime. As such, this
mark patch cannot be either. Would it be preferable to only enable them
both if the qos_flows config option is present? This would also have the
advantage of being able to add CAP_NET_ADMIN as appropriate at runtime.

- I have used sscanf instead of strtoul for both TOS and MARK in
QosConfig.cc (sscanf doesn't auto-detect the format of unsigned long
int). As a result, the tos variable could be changed to type char, which
is what it should be in my opinion. Should I do this?

- The code in forward.cc to obtain all the data needed to locate the
connection information is messy. Is there a better way to achieve it?
Conntrack needs to be passed local and remote port numbers and IP
addresses.

Is it too late to get this in v3.2? I will update the appropriate
release-notes once I know.

Thanks,

Andy

# Bazaar merge directive format 2 (Bazaar 0.90)
# revision_id: a...@andybev.com-20100801233324-uoy4sp2e3uszw5qn
# target_branch: file:///home/andrew/squid-repo/trunk/
# testament_sha1: 4bd1e0b517dc3322fa114f30fb26ff2483cb3410
# timestamp: 2010-08-02 00:34:42 +0100
# base_revision_id: squ...@treenet.co.nz-20100801134158-\
#   vhc003yv3ikwao7e
# 
# Begin patch
=== modified file 'configure.in'
--- configure.in	2010-08-01 06:29:48 +
+++ configure.in	2010-08-01 20:09:13 +
@@ -1146,6 +1146,32 @@
 fi
 AC_SUBST(SSLLIB)
 
+dnl Allow user to specify libnetfilter_conntrack (needed for QOS netfilter marking)
+AC_ARG_WITH(netfilter-conntrack,
+  AS_HELP_STRING([--with-netfilter-conntrack=PATH],
+ [Compile with the Netfilter conntrack libraries. The path to
+  the development libraries and headers
+  installation can be specified if outside of the
+  system standard directories]), [ 
+case "$with_netfilter_conntrack" in
+  no)
+: # Nothing special to do here
+;;
+  yes)
+AC_CHECK_LIB([netfilter_conntrack], [nfct_query],,
+  AC_MSG_ERROR([libnetfilter-conntrack library not found. Needed for netfilter-conntrack support]),
+  [-lnetfilter_conntrack])
+;;
+  *)  
+if test ! -d $withval ; then
+  AC_MSG_ERROR([--with-netfilter-conntrack path does not point to a directory])
+fi
+LDFLAGS="-L$with_netfilter_conntrack/lib $LDFLAGS"
+CPPFLAGS="-I$with_netfilter_conntrack/include $CPPFLAGS"
+with_netfilter_conntrack=yes
+;;
+  esac
+])
 
 AC_ARG_ENABLE(forw-via-db,
   AS_HELP_STRING([--enable-forw-via-db],[Enable Forw/Via database]), [
@@ -2061,6 +2087,15 @@
   [Enable Zero Penalty Hit QOS. When set, Squid will alter the
TOS field of HIT responses to help policing network traffic])
 AC_MSG_NOTICE([ZPH QOS enabled: $enable_zph_qos])
+if test "$enable_zph_qos" = "yes" ; then
+if test "$with_netfilter_conntrack" = "yes" ; then
+SQUID_DEFINE_BOOL(USE_QOS_NFMARK,$with_netfilter_conntrack,
+  [Enable support for QOS netfilter packet marking])
+else
+AC_MSG_WARN([--with-netfilter-conntrack not enabled. QOS features will not support Netfilter marking.])
+fi
+AC_MSG_NOTICE([QOS netfilter marking enabled: $with_netfilter_conntrack])
+fi
 
 dnl --with-maxfd present for compatibility with Squid-2.
 dnl undocumented in ./configure --help  to encourage using the Squid-3 directive.

=== modified file 'src/cf.data.pre'
--- src/cf.data.pre	2010-07-29 13:04:44 +
+++ src/cf.data.pre	2010-08-01 20:09:13 +
@@ -1532,18 +1532,23 @@
 LOC: Ip::Qos::TheConfig
 DOC_START
 	Allows you to select a TOS/DSCP value to mark outgoing
-	connections with, based on where the reply was sourced.
+	connections with, based on where the reply was sourced.	For
+	platforms using netfilter, allows you to set a netfilter mark
+	value instead of, or in addition to, a TOS value.
 
 	TOS values really only have local significance - so you should
 	know what you're specifying. For more information, see RFC2474,
 	RFC2475, and RFC3260.
 
 	The TOS/DSCP byte must be exactly that - octet value 0x00-0xFF.
-	Note that in practice often only values up to 0x3F are usable
-	as the two highest bits have been redefined for use by ECN
-	(RFC3168).
-
-	This setting is configured by setting the source TOS values:
+	Note that in practice often only values up to 0x3F are usable as
+	the two highest bits have been redefined for use by ECN (RFC3168).
+
+Mark values can be any unsigned integer value (normally up to 0x)
+
+	This setting is configured by setting the following values:
+
+tos|markWhether to set TOS or netfilter mark values
 
 	local-hit=0xFF		Value to mark local cache hits.
 
@@ -1551,23 +1556,26 @@
 
 	parent-hit=0xFF		Value to mark hits from parent peers.
 
-
-	NOTE: 'miss' preserve featu

Re: [MERGE] Rename enable-linux-netfilter to enable-nf-transparent

[Andrew Beverley]

> I'm not sure its fully worth doing this. 
> 
> * the "transparent" options are all due for a naming upgrade or 
> removal in the next major release anyway. 

Okay, I'm happy to leave as is. However, I would still suggest a review
of the naming in the upgrade (see below).

> 
> * linux-netfilter in fact enables both NAT (intercept) and TPROXY 
> (transparent) capture methods. And is documented so far as applying to 
> all supported netfilter targets. So naming for one specific of the two 
> (or three now that MARK is being added) is not reducing the confusion. 

Correct, I overlooked the NAT aspect, so probably best leaving it for
the time being.

I've added the configure option --with-netfilter-conntrack for the MARK
patch, but maybe to make things clearer the options should be more like:

--with-linux-netfilter

and

--with-linux-netfilter-conntrack

This makes it a bit clearer that the two are related but separate.
Thoughts?

[[ Sorry, I'm still not on this mailing list and thus unable to reply to
list emails. I've tried to subscribe twice in the last fortnight and
have also emailed squid-dev-ow...@squid-cache.org, all with no luck.
Could somebody add me please? In the interim, please copy me on posts,
as I am currently using the web archives. ]]

Thanks,

Andy 

Re: Compliance: Improved HTTP Range header field validation.

[Robert Collins]

+1

-Ro b

Re: [MERGE] Rename enable-linux-netfilter to enable-nf-transparent

[Alex Rousskov]

On 07/31/2010 04:27 PM, Andrew Beverley wrote:

I'd like to propose the attached patch, to rename the build option
--enable-linux-netfilter to --enable-nf-transparent. This is for 2
reasons:

1. It is consistent with the remainder of the transparent proxy options
(ifpw-transparent, ipf-transparent, pf-transparent).

2. It causes less confusion with my proposed netfilter marking patch,
which also relies on netfilter libraries, but different ones.
--enable-linux-netfilter implies the whole of the netfilter libraries
are being included, when in actual fact it is only one for the purposes
of transparent proxying.


Please also update doc/release-notes/release-3.2.sgml if this change is 
meant for v3.2.


Thank you,

Alex.

Compliance: Improved HTTP Range header field validation.

[Alex Rousskov]

Compliance: Improved HTTP Range header field validation.

1) Improve HttpHdrRangeSpec::parseInit() to parse syntactically valid 
range specs:


* Suffix ranges with 0 length (i.e. -0), are syntactically valid.

* Check that last-byte-pos is greater than or equal to first-byte-pos.

After the change, HttpHdrRangeSpec::parseInit() successfully parses 
suffix ranges with 0 length. They were rejected before. RFC 2616 section 
14.35.1 says such range specs are syntactically valid but unsatisfiable. 
Thus, we should ignore the range spec itself, but not the whole range 
header. These range specs will be rejected later, during canonization.



2) In HttpHdrRangeSpec::parseInit(), ignore the whole range header if 
one of range specs is syntactically invalid (i.e. range spec parsing fails).


Co-Advisor test case: test_clause/rfc2616/invalidRange


Please review.

Thank you,

Alex.
Compliance: Improved HTTP Range header field validation.

1) Improve HttpHdrRangeSpec::parseInit() to parse syntactically valid range
specs:

* Suffix ranges with 0 length (i.e. -0), are syntactically valid.

* Check that last-byte-pos is greater than or equal to first-byte-pos.

After the change, HttpHdrRangeSpec::parseInit() successfully parses suffix
ranges with 0 length. They were rejected before. RFC 2616 section 14.35.1 says
such range specs are syntactically valid but unsatisfiable. Thus, we should
ignore the range spec itself, but not the whole range header. These range
specs will be rejected later, during canonization.


2) In HttpHdrRangeSpec::parseInit(), ignore the whole range header if one of
range specs is syntactically invalid (i.e. range spec parsing fails).


Co-Advisor test case: test_clause/rfc2616/invalidRange

=== modified file 'src/HttpHdrRange.cc'
--- src/HttpHdrRange.cc	2010-04-07 09:49:57 +
+++ src/HttpHdrRange.cc	2010-08-01 18:39:28 +
@@ -81,67 +81,71 @@ HttpHdrRangeSpec::Create(const char *fie
 return NULL;
 
 return new HttpHdrRangeSpec(spec);
 }
 
 bool
 HttpHdrRangeSpec::parseInit(const char *field, int flen)
 {
 const char *p;
 
 if (flen < 2)
 return false;
 
 /* is it a suffix-byte-range-spec ? */
 if (*field == '-') {
 if (!httpHeaderParseOffset(field + 1, &length))
 return false;
 } else
 /* must have a '-' somewhere in _this_ field */
 if (!((p = strchr(field, '-')) || (p - field >= flen))) {
-debugs(64, 2, "ignoring invalid (missing '-') range-spec near: '" << field << "'");
+debugs(64, 2, "invalid (missing '-') range-spec near: '" << field << "'");
 return false;
 } else {
 if (!httpHeaderParseOffset(field, &offset))
 return false;
 
 p++;
 
 /* do we have last-pos ? */
 if (p - field < flen) {
 int64_t last_pos;
 
 if (!httpHeaderParseOffset(p, &last_pos))
 return false;
 
+/*
+ * RFC 2616 section 14.35.1 says that the
+ * last-byte-pos MUST be greater than or equal to the
+ * first-byte-pos.
+ */
+if (last_pos < offset) {
+debugs(64, 2, "invalid (last-byte-pos < first-byte-pos) range-spec near: " << field);
+return false;
+}
+
 HttpHdrRangeSpec::HttpRange aSpec (offset, last_pos + 1);
 
 length = aSpec.size();
 }
 }
 
-/* we managed to parse, check if the result makes sence */
-if (length == 0) {
-debugs(64, 2, "ignoring invalid (zero length) range-spec near: '" << field << "'");
-return false;
-}
-
 return true;
 }
 
 void
 HttpHdrRangeSpec::packInto(Packer * packer) const
 {
 if (!known_spec(offset))	/* suffix */
 packerPrintf(packer, "-%"PRId64,  length);
 else if (!known_spec(length))		/* trailer */
 packerPrintf(packer, "%"PRId64"-", offset);
 else			/* range */
 packerPrintf(packer, "%"PRId64"-%"PRId64,
  offset, offset + length - 1);
 }
 
 void
 HttpHdrRangeSpec::outputInfo( char const *note) const
 {
 debugs(64, 5, "HttpHdrRangeSpec::canonize: " << note << ": [" <<
offset << ", " << offset + length <<
@@ -231,69 +235,70 @@ HttpHdrRange::HttpHdrRange () : clen (Ht
 HttpHdrRange *
 HttpHdrRange::ParseCreate(const String * range_spec)
 {
 HttpHdrRange *r = new HttpHdrRange;
 
 if (!r->parseInit(range_spec)) {
 delete r;
 r = NULL;
 }
 
 return r;
 }
 
 /* returns true if ranges are valid; inits HttpHdrRange */
 bool
 HttpHdrRange::parseInit(const String * range_spec)
 {
 const char *item;
 const char *pos = NULL;
 int ilen;
-int count = 0;
 assert(this && range_spec);
 ++ParsedCount;
 debugs(64, 8, "parsing range field: '" << range_spec << "'");
 /* check range type */
 
 if (range_sp

Build failed in Hudson: 3.HEAD-i386-opensolaris-SunStudioCc #343

[noc]

See 


Changes:

[Amos Jeffries ] Prep for 3.1.6

[Amos Jeffries ] Fix const-correctness on helper debug()

--
[...truncated 3107 lines...]
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c ../../lib/uudecode.c
source='../../lib/xusleep.c' object='xusleep.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c ../../lib/xusleep.c
source='../../lib/eui64_aton.c' object='eui64_aton.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c 
../../lib/eui64_aton.c
rm -f libmiscutil.a
/usr/gnu/bin/ar cru libmiscutil.a MemPool.o MemPoolChunked.o MemPoolMalloc.o 
base64.o charset.o getfullhostname.o hash.o heap.o html_quote.o iso3307.o md5.o 
radix.o rfc1035.o rfc1123.o rfc1738.o rfc2617.o rfc3596.o Splay.o strnstr.o 
stub_memaccount.o util.o uudecode.o xusleep.o   eui64_aton.o
ranlib libmiscutil.a
make[3]: Leaving directory 
`
make[2]: Leaving directory 
`
Making all in snmplib
make[2]: Entering directory 
`
source='../../snmplib/asn1.c' object='asn1.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/asn1.c
source='../../snmplib/parse.c' object='parse.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/parse.c
source='../../snmplib/snmp_vars.c' object='snmp_vars.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_vars.c
source='../../snmplib/coexistance.c' object='coexistance.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/coexistance.c
source='../../snmplib/snmp_api.c' object='snmp_api.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api.c
source='../../snmplib/snmp_error.c' object='snmp_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_error.c
source='../../snmplib/mib.c' object='mib.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/mib.c
source='../../snmplib/snmp_api_error.c' object='snmp_api_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api_error.c
source='../../snmplib/snmp_msg.c' 

Hudson build is back to normal: 3.HEAD-i386-Debian-sid #327

[noc]

See 

Build failed in Hudson: 3.HEAD-i386-opensolaris-SunStudioCc #342

[noc]

See 


Changes:

[Amos Jeffries ] Fix const-correctness on helper debug()

--
[...truncated 3104 lines...]
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c ../../lib/uudecode.c
source='../../lib/xusleep.c' object='xusleep.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c ../../lib/xusleep.c
source='../../lib/eui64_aton.c' object='eui64_aton.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c 
../../lib/eui64_aton.c
rm -f libmiscutil.a
/usr/gnu/bin/ar cru libmiscutil.a MemPool.o MemPoolChunked.o MemPoolMalloc.o 
base64.o charset.o getfullhostname.o hash.o heap.o html_quote.o iso3307.o md5.o 
radix.o rfc1035.o rfc1123.o rfc1738.o rfc2617.o rfc3596.o Splay.o strnstr.o 
stub_memaccount.o util.o uudecode.o xusleep.o   eui64_aton.o
ranlib libmiscutil.a
make[3]: Leaving directory 
`
make[2]: Leaving directory 
`
Making all in snmplib
make[2]: Entering directory 
`
source='../../snmplib/asn1.c' object='asn1.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/asn1.c
source='../../snmplib/parse.c' object='parse.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/parse.c
source='../../snmplib/snmp_vars.c' object='snmp_vars.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_vars.c
source='../../snmplib/coexistance.c' object='coexistance.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/coexistance.c
source='../../snmplib/snmp_api.c' object='snmp_api.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api.c
source='../../snmplib/snmp_error.c' object='snmp_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_error.c
source='../../snmplib/mib.c' object='mib.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/mib.c
source='../../snmplib/snmp_api_error.c' object='snmp_api_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api_error.c
source='../../snmplib/snmp_msg.c' object='snmp_msg.o' libtool=no \

Hudson build is back to normal: 3.HEAD-i386-FreeBSD-6.4 #415

[noc]

See 

Hudson build is back to normal: 3.HEAD-amd64-FreeBSD-7.2 #500

[noc]

See 

Build failed in Hudson: 3.HEAD-i386-opensolaris-SunStudioCc #341

[noc]

See 


Changes:

[Amos Jeffries ] Fix const-correctness on helper debug()

[Amos Jeffries ] Add template release notes for 3.3

--
[...truncated 3108 lines...]
source='../../lib/xusleep.c' object='xusleep.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c ../../lib/xusleep.c
source='../../lib/eui64_aton.c' object='eui64_aton.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5  -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all  -D_REENTRANT -g -c 
../../lib/eui64_aton.c
rm -f libmiscutil.a
/usr/gnu/bin/ar cru libmiscutil.a MemPool.o MemPoolChunked.o MemPoolMalloc.o 
base64.o charset.o getfullhostname.o hash.o heap.o html_quote.o iso3307.o md5.o 
radix.o rfc1035.o rfc1123.o rfc1738.o rfc2617.o rfc3596.o Splay.o strnstr.o 
stub_memaccount.o util.o uudecode.o xusleep.o   eui64_aton.o
ranlib libmiscutil.a
make[3]: Leaving directory 
`
make[2]: Leaving directory 
`
Making all in snmplib
make[2]: Entering directory 
`
source='../../snmplib/asn1.c' object='asn1.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/asn1.c
source='../../snmplib/parse.c' object='parse.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/parse.c
source='../../snmplib/snmp_vars.c' object='snmp_vars.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_vars.c
source='../../snmplib/coexistance.c' object='coexistance.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/coexistance.c
source='../../snmplib/snmp_api.c' object='snmp_api.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api.c
source='../../snmplib/snmp_error.c' object='snmp_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_error.c
source='../../snmplib/mib.c' object='mib.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/mib.c
source='../../snmplib/snmp_api_error.c' object='snmp_api_error.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c ../../snmplib/snmp_api_error.c
source='../../snmplib/snmp_msg.c' object='snmp_msg.o' libtool=no \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
ccache /opt/SunStudioExpress/prod/bin/cc -DSQUID_SNMP=1  -I../.. 
-I../include -I../../include  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_RE

Build failed in Hudson: 3.HEAD-i386-opensolaris-SunStudioCc #340

[noc]

See 


Changes:

[Amos Jeffries ] Add template release notes for 3.3

[Amos Jeffries ] Drop 3.2 release notes html from 3.HEAD

[Amos Jeffries ] Author: Andrew Beverley 

Fix missing test command when testing OS

[Amos Jeffries ] Basic split-stack functionality

Enable split-stack detection by default.

There is now enough split-stack support to enable accepting IPv6 client
connections on systems with separate IPv4/IPv6 stacks. Also some limited
server connection capabilities (see tcp_outgoing_addr config hacks).

SNMP, ICP, HTCP listeners and outbound connections currently default to
IPv4-only on these systems to retain backward-compatibility.
But may be explicity configured to IPv6-only. There is no support as yet
for dual-protocol behaviour in the sockets of these three protocols.

[Amos Jeffries ] Bug 2994: pt 2: Open ports as IP4-only 
when IPv6 disabled

--
[...truncated 3028 lines...]
source='../../compat/debug.cc' object='debug.lo' libtool=yes \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
/bin/sh ../libtool --tag=CXX   --mode=compile ccache 
/opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H  -I../.. -I../../include 
-I../../src -I../include -I/usr/local/include -I/usr/include/gssapi 
-I/usr/include/kerberosv5  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c -o debug.lo ../../compat/debug.cc
source='../../compat/GnuRegex.c' object='GnuRegex.lo' libtool=yes \
DEPDIR=.deps depmode=none /bin/sh ../../cfgaux/depcomp \
/bin/sh ../libtool --tag=CC   --mode=compile ccache 
/opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H  -I../.. -I../../include 
-I../../src -I../include -I/usr/local/include -I/usr/include/gssapi 
-I/usr/include/kerberosv5  -I/usr/include/gssapi -I/usr/include/kerberosv5 
-errwarn=%all  -D_REENTRANT -g -c -o GnuRegex.lo ../../compat/GnuRegex.c
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/GnuRegex.c  -KPIC -DPIC -o .libs/GnuRegex.o
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/assert.cc  -KPIC -DPIC -o .libs/assert.o
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/debug.cc  -KPIC -DPIC -o .libs/debug.o
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/compat.cc  -KPIC -DPIC -o .libs/compat.o
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/cc -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/GnuRegex.c -o GnuRegex.o >/dev/null 2>&1
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/compat.cc -o compat.o >/dev/null 2>&1
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/assert.cc -o assert.o >/dev/null 2>&1
libtool: compile:  ccache /opt/SunStudioExpress/prod/bin/CC -DHAVE_CONFIG_H 
-I../.. -I../../include -I../../src -I../include -I/usr/local/include 
-I/usr/include/gssapi -I/usr/include/kerberosv5 -I/usr/include/gssapi 
-I/usr/include/kerberosv5 -errwarn=%all -D_REENTRANT -g -c 
../../compat/debug.cc -o debug.o >/dev/null 2>&1
/bin/sh ../libtool --tag=CXX   --mode=link ccache 
/opt/SunStudioExpress/prod/bin/CC -errwarn=%all  -D_REENTRANT -g  
-L/usr/local/sunstudio-libs/lib -o libcompat.la  assert.lo compat.lo debug.lo 
GnuRegex.lo  
libtool: link: ccache /opt/SunStudioExpress/prod/bin/CC -xar -o 
.libs/libcompat.a  .libs/assert.o .libs/compat.o .libs/debug.o .libs/GnuReg

Hudson build is back to normal: 3.HEAD-i386-opensolaris #379

[noc]

See 

Hudson build is back to normal: 3.HEAD-amd64-CentOS-5.3 #704

[noc]

See 

Build failed in Hudson: 3.HEAD-i386-Debian-sid #326

[noc]

See 

Changes:

[Amos Jeffries ] Drop 3.2 release notes html from 3.HEAD

[Amos Jeffries ] Author: Andrew Beverley 

Fix missing test command when testing OS

[Amos Jeffries ] Basic split-stack functionality

Enable split-stack detection by default.

There is now enough split-stack support to enable accepting IPv6 client
connections on systems with separate IPv4/IPv6 stacks. Also some limited
server connection capabilities (see tcp_outgoing_addr config hacks).

SNMP, ICP, HTCP listeners and outbound connections currently default to
IPv4-only on these systems to retain backward-compatibility.
But may be explicity configured to IPv6-only. There is no support as yet
for dual-protocol behaviour in the sockets of these three protocols.

[Amos Jeffries ] Bug 2994: pt 2: Open ports as IP4-only 
when IPv6 disabled

--
[...truncated 1487 lines...]
/usr/bin/po2html `/usr/bin/po2html --help | grep -o 
"\-\-notidy"` --progress=none -i ../.././test-suite/../errors/$lang.po -t 
../.././test-suite/../errors/$f >../errors/$lang/$page || exit 1; \
done; \
echo "done."; \
fi; \
touch uk.lang
Translate 'uk' ...done.
if test "/usr/bin/po2html" != "" && test "/usr/bin/po2html" != "no" && test 
"/usr/bin/po2html" != "off" && test -f ../.././test-suite/../errors/en.po; then 
\
lang=`basename uz.lang .lang`; \
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
for f in templates/ERR_ACCESS_DENIED 
templates/ERR_CACHE_ACCESS_DENIED templates/ERR_CACHE_MGR_ACCESS_DENIED 
templates/ERR_CANNOT_FORWARD templates/ERR_CONNECT_FAIL 
templates/ERR_DIR_LISTING templates/ERR_DNS_FAIL templates/ERR_ESI 
templates/ERR_FORWARDING_DENIED templates/ERR_FTP_DISABLED 
templates/ERR_FTP_FAILURE templates/ERR_FTP_FORBIDDEN 
templates/ERR_FTP_NOT_FOUND templates/ERR_FTP_PUT_CREATED 
templates/ERR_FTP_PUT_ERROR templates/ERR_FTP_PUT_MODIFIED 
templates/ERR_FTP_UNAVAILABLE templates/ERR_ICAP_FAILURE 
templates/ERR_INVALID_REQ templates/ERR_INVALID_RESP templates/ERR_INVALID_URL 
templates/ERR_LIFETIME_EXP templates/ERR_NO_RELAY 
templates/ERR_ONLY_IF_CACHED_MISS templates/ERR_READ_ERROR 
templates/ERR_READ_TIMEOUT templates/ERR_SECURE_CONNECT_FAIL 
templates/ERR_SHUTTING_DOWN templates/ERR_SOCKET_FAILURE templates/ERR_TOO_BIG 
templates/ERR_UNSUP_HTTPVERSION templates/ERR_UNSUP_REQ 
templates/ERR_URN_RESOLVE templates/ERR_WRITE_ERROR 
templates/ERR_ZERO_SIZE_OBJECT
 ; do \
page=`basename $f`; \
/usr/bin/po2html `/usr/bin/po2html --help | grep -o 
"\-\-notidy"` --progress=none -i ../.././test-suite/../errors/$lang.po -t 
../.././test-suite/../errors/$f >../errors/$lang/$page || exit 1; \
done; \
echo "done."; \
fi; \
touch uz.lang
Translate 'uz' ...done.
if test "/usr/bin/po2html" != "" && test "/usr/bin/po2html" != "no" && test 
"/usr/bin/po2html" != "off" && test -f ../.././test-suite/../errors/en.po; then 
\
lang=`basename zh-cn.lang .lang`; \
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
for f in templates/ERR_ACCESS_DENIED 
templates/ERR_CACHE_ACCESS_DENIED templates/ERR_CACHE_MGR_ACCESS_DENIED 
templates/ERR_CANNOT_FORWARD templates/ERR_CONNECT_FAIL 
templates/ERR_DIR_LISTING templates/ERR_DNS_FAIL templates/ERR_ESI 
templates/ERR_FORWARDING_DENIED templates/ERR_FTP_DISABLED 
templates/ERR_FTP_FAILURE templates/ERR_FTP_FORBIDDEN 
templates/ERR_FTP_NOT_FOUND templates/ERR_FTP_PUT_CREATED 
templates/ERR_FTP_PUT_ERROR templates/ERR_FTP_PUT_MODIFIED 
templates/ERR_FTP_UNAVAILABLE templates/ERR_ICAP_FAILURE 
templates/ERR_INVALID_REQ templates/ERR_INVALID_RESP templates/ERR_INVALID_URL 
templates/ERR_LIFETIME_EXP templates/ERR_NO_RELAY 
templates/ERR_ONLY_IF_CACHED_MISS templates/ERR_READ_ERROR 
templates/ERR_READ_TIMEOUT templates/ERR_SECURE_CONNECT_FAIL 
templates/ERR_SHUTTING_DOWN templates/ERR_SOCKET_FAILURE templates/ERR_TOO_BIG 
templates/ERR_UNSUP_HTTPVERSION templates/ERR_UNSUP_REQ 
templates/ERR_URN_RESOLVE templates/ERR_WRITE_ERROR 
templates/ERR_ZERO_SIZE_OBJECT
 ; do \
page=`basename $f`; \
/usr/bin/po2html `/usr/bin/po2html --help | grep -o 
"\-\-notidy"` --progress=none -i ../.././test-suite/../errors/$lang.po -t 
../.././test-suite/../errors/$f >../errors/$lang/$page || exit 1; \
done; \
echo "done."; \
fi; \
touch zh-cn.lang
Translate 'zh-cn' ...done.
if test "/usr/bin/po2html" != "" && test "/usr/bin/po2html" != "no" && test 
"/usr/bin/po2html" != "off" && test -f ../.././test-suite/../errors/en.po; then 
\
lang=`basename zh-tw.lang .lang`; \
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
   

Build failed in Hudson: 3.HEAD-amd64-CentOS-5.3 #703

[noc]

See 

Changes:

[Amos Jeffries ] Drop 3.2 release notes html from 3.HEAD

[Amos Jeffries ] Author: Andrew Beverley 

Fix missing test command when testing OS

--
[...truncated 1784 lines...]
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`
mkdir -p -- 

make[3]: Leaving directory 
`
make[3]: Entering directory 
`

Build failed in Hudson: 3.HEAD-i386-opensolaris #378

[noc]

See 

Changes:

[Amos Jeffries ] Drop 3.2 release notes html from 3.HEAD

[Amos Jeffries ] Author: Andrew Beverley 

Fix missing test command when testing OS

[Amos Jeffries ] Basic split-stack functionality

Enable split-stack detection by default.

There is now enough split-stack support to enable accepting IPv6 client
connections on systems with separate IPv4/IPv6 stacks. Also some limited
server connection capabilities (see tcp_outgoing_addr config hacks).

SNMP, ICP, HTCP listeners and outbound connections currently default to
IPv4-only on these systems to retain backward-compatibility.
But may be explicity configured to IPv6-only. There is no support as yet
for dual-protocol behaviour in the sockets of these three protocols.

[Amos Jeffries ] Bug 2994: pt 2: Open ports as IP4-only 
when IPv6 disabled

--
[...truncated 1676 lines...]
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
for f in templates/ERR_ACCESS_DENIED 
templates/ERR_CACHE_ACCESS_DENIED templates/ERR_CACHE_MGR_ACCESS_DENIED 
templates/ERR_CANNOT_FORWARD templates/ERR_CONNECT_FAIL 
templates/ERR_DIR_LISTING templates/ERR_DNS_FAIL templates/ERR_ESI 
templates/ERR_FORWARDING_DENIED templates/ERR_FTP_DISABLED 
templates/ERR_FTP_FAILURE templates/ERR_FTP_FORBIDDEN 
templates/ERR_FTP_NOT_FOUND templates/ERR_FTP_PUT_CREATED 
templates/ERR_FTP_PUT_ERROR templates/ERR_FTP_PUT_MODIFIED 
templates/ERR_FTP_UNAVAILABLE templates/ERR_ICAP_FAILURE 
templates/ERR_INVALID_REQ templates/ERR_INVALID_RESP templates/ERR_INVALID_URL 
templates/ERR_LIFETIME_EXP templates/ERR_NO_RELAY 
templates/ERR_ONLY_IF_CACHED_MISS templates/ERR_READ_ERROR 
templates/ERR_READ_TIMEOUT templates/ERR_SECURE_CONNECT_FAIL 
templates/ERR_SHUTTING_DOWN templates/ERR_SOCKET_FAILURE templates/ERR_TOO_BIG 
templates/ERR_UNSUP_HTTPVERSION templates/ERR_UNSUP_REQ 
templates/ERR_URN_RESOLVE templates/ERR_WRITE_ERROR 
templates/ERR_ZERO_SIZE_OBJECT
 ; do \
page=`basename $f`; \
 ` --help | grep -o "\-\-notidy"` --progress=none -i 
../.././test-suite/../errors/$lang.po -t ../.././test-suite/../errors/$f 
>../errors/$lang/$page || exit 1; \
done; \
echo "done."; \
fi; \
touch uk.lang
if test "" != "" && test "" != "no" && test "" != "off" && test -f 
../.././test-suite/../errors/en.po; then \
lang=`basename uz.lang .lang`; \
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
for f in templates/ERR_ACCESS_DENIED 
templates/ERR_CACHE_ACCESS_DENIED templates/ERR_CACHE_MGR_ACCESS_DENIED 
templates/ERR_CANNOT_FORWARD templates/ERR_CONNECT_FAIL 
templates/ERR_DIR_LISTING templates/ERR_DNS_FAIL templates/ERR_ESI 
templates/ERR_FORWARDING_DENIED templates/ERR_FTP_DISABLED 
templates/ERR_FTP_FAILURE templates/ERR_FTP_FORBIDDEN 
templates/ERR_FTP_NOT_FOUND templates/ERR_FTP_PUT_CREATED 
templates/ERR_FTP_PUT_ERROR templates/ERR_FTP_PUT_MODIFIED 
templates/ERR_FTP_UNAVAILABLE templates/ERR_ICAP_FAILURE 
templates/ERR_INVALID_REQ templates/ERR_INVALID_RESP templates/ERR_INVALID_URL 
templates/ERR_LIFETIME_EXP templates/ERR_NO_RELAY 
templates/ERR_ONLY_IF_CACHED_MISS templates/ERR_READ_ERROR 
templates/ERR_READ_TIMEOUT templates/ERR_SECURE_CONNECT_FAIL 
templates/ERR_SHUTTING_DOWN templates/ERR_SOCKET_FAILURE templates/ERR_TOO_BIG 
templates/ERR_UNSUP_HTTPVERSION templates/ERR_UNSUP_REQ 
templates/ERR_URN_RESOLVE templates/ERR_WRITE_ERROR 
templates/ERR_ZERO_SIZE_OBJECT
 ; do \
page=`basename $f`; \
 ` --help | grep -o "\-\-notidy"` --progress=none -i 
../.././test-suite/../errors/$lang.po -t ../.././test-suite/../errors/$f 
>../errors/$lang/$page || exit 1; \
done; \
echo "done."; \
fi; \
touch uz.lang
if test "" != "" && test "" != "no" && test "" != "off" && test -f 
../.././test-suite/../errors/en.po; then \
lang=`basename zh-cn.lang .lang`; \
mkdir -p ../errors/$lang; \
echo -n "Translate '$lang' ..."; \
for f in templates/ERR_ACCESS_DENIED 
templates/ERR_CACHE_ACCESS_DENIED templates/ERR_CACHE_MGR_ACCESS_DENIED 
templates/ERR_CANNOT_FORWARD templates/ERR_CONNECT_FAIL 
templates/ERR_DIR_LISTING templates/ERR_DNS_FAIL templates/ERR_ESI 
templates/ERR_FORWARDING_DENIED templates/ERR_FTP_DISABLED 
templates/ERR_FTP_FAILURE templates/ERR_FTP_FORBIDDEN 
templates/ERR_FTP_NOT_FOUND templates/ERR_FTP_PUT_CREATED 
templates/ERR_FTP_PUT_ERROR templates/ERR_FTP_PUT_MODIFIED 
templates/ERR_FTP_UNAVAILABLE templates/ERR_ICAP_FAILURE 
templates/ERR_INVALID_REQ templates/ERR_INVALID_RESP templates/ERR_INVALID_URL 
templates/ERR_LIFETIME_EXP templates/ERR_NO_RELAY 
templates/ERR_ONLY_IF_CACHED_MISS templates/ERR_READ_ERROR 
templates/ERR_READ_TIMEOUT template