IBM-Swift / swift-buildpack

IBM Cloud buildpack for Swift
BSD 3-Clause "New" or "Revised" License
32 stars 31 forks source link

Bug in curl 7.58 (shipped in 18.04) - workaround? #120

Open djones6 opened 4 years ago

djones6 commented 4 years ago

There's a bug in the version of curl (7.58) shipped with Ubuntu 18.04. Upon receiving a chunked response, curl will call back with each chunk of data twice, leading to data corruption (and a failure to parse the response). For more information, see https://github.com/IBM-Swift/Kitura/issues/1465. We're considering coding a workaround for this into Kitura-net, but it's far from straightforward.

We reported this to Ubuntu in June, in https://bugs.launchpad.net/ubuntu/+source/hdf5/+bug/1833198 - but no update is yet available for the 18.04 package.

In the meantime, is it possible to update the version of curl in the buildpack to 7.59 or later? This affects anyone trying to receive a chunked response, including users of Google OAuth or CouchDB / Cloudant, as both send chunked responses.

christiancompton commented 4 years ago

Upgrading the cflinuxfs3 stack itself on IBM Cloud is not an option. I am currently exploring having the buildpack get version 7.59 of libcurl, so that Kitura-net applications are unaffected.