[PATCH] proxy-auth: additional tests
authorStefan Eissing <stefan@eissing.org>
Fri, 6 Mar 2026 13:54:09 +0000 (14:54 +0100)
committerSamuel Henrique <samueloph@debian.org>
Fri, 8 May 2026 14:16:21 +0000 (07:16 -0700)
commit2daf5a6df57d880c4f0a59e147cf9de77ab4bb9d
tree3e457713a100b0ffe52f95a4ed0903552582e758
parentdfdda5d11f7c9f9b60d3e676c088fbee3c880679
[PATCH] proxy-auth: additional tests

Also eliminate the special handling for socks proxy match.

Closes #20837

Backported-by: Samuel Henrique <samueloph@debian.org>
 * Refresh patch context for lib/url.c

Backported by: Samuel Henrique <samueloph@debian.org>
 * Bookworm 7.88.1: same proxy_info_matches and
   socks_proxy_info_matches functions, just at line 863. Bookworm's
   proxy_info_matches still uses strcasecompare() (upstream switched
   to curl_strequal() at some point post-7.88.1), so leave that
   call alone -- only add the new Curl_timestrcmp() user/passwd
   check inside it. Keep socks_proxy_info_matches() in place and
   switch the call site at line 1214 from socks_proxy_info_matches
   to proxy_info_matches, matching the trixie minimal-diff approach.
 * Drop the tests/http/test_13_proxy_auth.py and
   tests/http/testenv/curl.py hunks: bookworm has no tests/http/
   pytest infrastructure at all (those tests appeared in upstream
   later than 7.88.1).

Gbp-Pq: Name CVE-2026-3784.patch
lib/url.c