Skip to content

Bump the vendored engine to 1737d72e, engine master - #257

Merged
xroche merged 1 commit into
masterfrom
bump-engine-1737d72e
Oct 22, 2026
Merged

xroche merged 1 commit into
masterfrom
bump-engine-1737d72e

Conversation

@xroche

@xroche xroche commented Oct 22, 2026

Copy link
Copy Markdown
Owner

The engine now masks logins in hts-log.txt, hts-err.txt, hts-ioinfo.txt and the argument messages, and creates its run and log files owner-only on POSIX. That second one covers doit.log, which holds the whole command line. There is also a new export, hts_hide_secrets(), for engine text a front end shows.

The bump adds three engine sources, and Android.mk carries an explicit list, so htsbundle.c and htsbundle_selftest.c join it. Without the first, the x86_64 link fails on six undefined hts_bundle_* symbols.

BrowserLoginEngineLimitsTest went red, which is the guard working. The engine split cookie_load, so the markers the test reads between now bracket a region with none of the buffers it checks. It anchors on cookie_load_records instead, and every cap it asserts is unchanged.

Login bundles land here too, and nothing uses them. versionName keeps its 3.50.5 prefix, because HTTRACK_VERSIONID did not move.

Brings the login-redaction work the logs needed. Logins are masked in
hts-log.txt, hts-err.txt, hts-ioinfo.txt and the argument messages, run
and log files are created owner-only on POSIX, which covers doit.log and
its full command line, and there is a new export, hts_hide_secrets(),
for engine text a front end displays. Also the login bundles, which this
app does not use yet, and a 32-bit date fix that cannot reach us because
we ship no 32-bit ABI.

The bump adds three engine sources, and Android.mk carries an explicit
list, so htsbundle.c and htsbundle_selftest.c are added to it. Both are
needed: htscore.c, htslib.c and htsbauth.c call into the bundle, and
htsselftest.c registers selftests_bundle. Measured rather than assumed.
Without htsbundle.c the x86_64 link fails on six undefined hts_bundle_*
symbols, and with it all three libraries link and the built libhttrack.so
carries the bundle's own strings.

BrowserLoginEngineLimitsTest went red on the bump, which is the guard
working. The engine split cookie_load, so the comment markers the test
read between now bracket a region holding none of the buffers it checks.
It anchors on cookie_load_records instead, the function that parses a
Netscape record. Every cap it asserts is unchanged, and shrinking one in
the pinned source still turns it red.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Signed-off-by: Xavier Roche <xroche@gmail.com>
@xroche
xroche merged commit d9128e9 into master Oct 22, 2026
7 checks passed
@xroche
xroche deleted the bump-engine-1737d72e branch October 22, 2026 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant