sgcIndy 2026.9.0 Latest
- 2026.9.0: 2026 September
- FixedFixed Bug Setup Community: the precompiled Delphi 13 binaries were produced from the Delphi 12 projects, so they were named IndyCore290, IndySystem290 and IndyProtocols290 instead of the 370 names the Delphi 13 installer expects, and the Windows ARM64EC platform was not built at all because the Delphi 12 projects do not define it. Delphi 13 now builds its own 370 projects for every supported platform.
- FixedFixed the protocol name agreed through ALPN being written with four bytes into the single byte OpenSSL keeps for its length, so every handshake that negotiated a protocol overwrote the memory next to it. A name longer than 255 characters cannot be represented in that single byte and is now refused instead of being written with a wrong length.
- FixedFixed a TLS server using the IOCP or EPOLL engine using all the CPU of one thread when the other side asked to renegotiate the connection. The server retried the write again and again instead of sending what OpenSSL had already prepared, so that connection could never continue and the thread stayed busy until the server was stopped.
- FixedFixed a TLS application on Linux being closed by the operating system when the other side reset the connection while data was being written. OpenSSL writes to the socket in a way that cannot ask the system to suppress the broken pipe signal, and nothing else suppressed it, so the whole application ended instead of the write simply failing. An application that already handles that signal itself keeps its own handling.
- FixedFixed the same broken pipe problem under FPC and Lazarus, where writing to a connection whose other side had already closed ended the application. On macOS the protection was only applied to connections opened by a client, so connections accepted by a server were still exposed.