diff -u -r -N squid-3.3.2/ChangeLog squid-3.3.3/ChangeLog
--- squid-3.3.2/ChangeLog	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/ChangeLog	2013-03-12 23:17:07.000000000 +1300
@@ -1,3 +1,8 @@
+Changes to squid-3.3.3 (12 Mar 2013):
+
+	- Bug 3720: Add missing include in /dev/poll I/O module (pt2)
+	- ... and all changes from squid 3.2.9
+
 Changes to squid-3.3.2 (02 Mar 2013):
 
 	- Bug 3781: Proxy Authentication not sent to cache_peer
@@ -50,6 +55,13 @@
 	- ... and many compile error fixes
 	- ... and a very large amount of code polish for faster compilation
 
+Changes to squid-3.2.9 (12 Mar 2013):
+
+	- Regression fix: Accept-Language header parse
+	- Bug 3673: Silence 'Failed to select source' messages
+	- Fix authentication headers sent on peer digest requests
+	- Fix build error on Solaris, OpenIndiana, Omnios
+
 Changes to squid-3.2.8 (02 Mar 2013):
 
 	- Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
diff -u -r -N squid-3.3.2/configure squid-3.3.3/configure
--- squid-3.3.2/configure	2013-03-02 15:38:12.000000000 +1300
+++ squid-3.3.3/configure	2013-03-12 23:18:22.000000000 +1300
@@ -1,7 +1,7 @@
 #! /bin/sh
 # From configure.ac Revision.
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.68 for Squid Web Proxy 3.3.2.
+# Generated by GNU Autoconf 2.68 for Squid Web Proxy 3.3.3.
 #
 # Report bugs to <http://bugs.squid-cache.org/>.
 #
@@ -575,8 +575,8 @@
 # Identity of this package.
 PACKAGE_NAME='Squid Web Proxy'
 PACKAGE_TARNAME='squid'
-PACKAGE_VERSION='3.3.2'
-PACKAGE_STRING='Squid Web Proxy 3.3.2'
+PACKAGE_VERSION='3.3.3'
+PACKAGE_STRING='Squid Web Proxy 3.3.3'
 PACKAGE_BUGREPORT='http://bugs.squid-cache.org/'
 PACKAGE_URL=''
 
@@ -1570,7 +1570,7 @@
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures Squid Web Proxy 3.3.2 to adapt to many kinds of systems.
+\`configure' configures Squid Web Proxy 3.3.3 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1640,7 +1640,7 @@
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
-     short | recursive ) echo "Configuration of Squid Web Proxy 3.3.2:";;
+     short | recursive ) echo "Configuration of Squid Web Proxy 3.3.3:";;
    esac
   cat <<\_ACEOF
 
@@ -2014,7 +2014,7 @@
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-Squid Web Proxy configure 3.3.2
+Squid Web Proxy configure 3.3.3
 generated by GNU Autoconf 2.68
 
 Copyright (C) 2010 Free Software Foundation, Inc.
@@ -3110,7 +3110,7 @@
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by Squid Web Proxy $as_me 3.3.2, which was
+It was created by Squid Web Proxy $as_me 3.3.3, which was
 generated by GNU Autoconf 2.68.  Invocation command line was
 
   $ $0 $@
@@ -3929,7 +3929,7 @@
 
 # Define the identity of the package.
  PACKAGE='squid'
- VERSION='3.3.2'
+ VERSION='3.3.3'
 
 
 cat >>confdefs.h <<_ACEOF
@@ -31319,7 +31319,7 @@
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by Squid Web Proxy $as_me 3.3.2, which was
+This file was extended by Squid Web Proxy $as_me 3.3.3, which was
 generated by GNU Autoconf 2.68.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -31385,7 +31385,7 @@
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-Squid Web Proxy config.status 3.3.2
+Squid Web Proxy config.status 3.3.3
 configured by $0, generated by GNU Autoconf 2.68,
   with options \\"\$ac_cs_config\\"
 
diff -u -r -N squid-3.3.2/configure.ac squid-3.3.3/configure.ac
--- squid-3.3.2/configure.ac	2013-03-02 15:38:12.000000000 +1300
+++ squid-3.3.3/configure.ac	2013-03-12 23:18:22.000000000 +1300
@@ -1,4 +1,4 @@
-AC_INIT([Squid Web Proxy],[3.3.2],[http://bugs.squid-cache.org/],[squid])
+AC_INIT([Squid Web Proxy],[3.3.3],[http://bugs.squid-cache.org/],[squid])
 AC_PREREQ(2.61)
 AC_CONFIG_HEADERS([include/autoconf.h])
 AC_CONFIG_AUX_DIR(cfgaux)
diff -u -r -N squid-3.3.2/helpers/basic_auth/DB/basic_db_auth.8 squid-3.3.3/helpers/basic_auth/DB/basic_db_auth.8
--- squid-3.3.2/helpers/basic_auth/DB/basic_db_auth.8	2013-03-02 16:01:15.000000000 +1300
+++ squid-3.3.3/helpers/basic_auth/DB/basic_db_auth.8	2013-03-12 23:47:08.000000000 +1300
@@ -124,7 +124,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BASIC_DB_AUTH 1"
-.TH BASIC_DB_AUTH 1 "2013-03-01" "perl v5.10.1" "User Contributed Perl Documentation"
+.TH BASIC_DB_AUTH 1 "2013-03-12" "perl v5.10.1" "User Contributed Perl Documentation"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
diff -u -r -N squid-3.3.2/helpers/external_acl/SQL_session/ext_sql_session_acl.8 squid-3.3.3/helpers/external_acl/SQL_session/ext_sql_session_acl.8
--- squid-3.3.2/helpers/external_acl/SQL_session/ext_sql_session_acl.8	2013-03-02 16:01:20.000000000 +1300
+++ squid-3.3.3/helpers/external_acl/SQL_session/ext_sql_session_acl.8	2013-03-12 23:47:16.000000000 +1300
@@ -124,7 +124,7 @@
 .\" ========================================================================
 .\"
 .IX Title "EXT_SQL_SESSION_ACL 1"
-.TH EXT_SQL_SESSION_ACL 1 "2013-03-01" "perl v5.10.1" "User Contributed Perl Documentation"
+.TH EXT_SQL_SESSION_ACL 1 "2013-03-12" "perl v5.10.1" "User Contributed Perl Documentation"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
diff -u -r -N squid-3.3.2/helpers/external_acl/wbinfo_group/ext_wbinfo_group_acl.8 squid-3.3.3/helpers/external_acl/wbinfo_group/ext_wbinfo_group_acl.8
--- squid-3.3.2/helpers/external_acl/wbinfo_group/ext_wbinfo_group_acl.8	2013-03-02 16:01:20.000000000 +1300
+++ squid-3.3.3/helpers/external_acl/wbinfo_group/ext_wbinfo_group_acl.8	2013-03-12 23:47:17.000000000 +1300
@@ -124,7 +124,7 @@
 .\" ========================================================================
 .\"
 .IX Title "EXT_WBINFO_GROUP_ACL.PL.IN 1"
-.TH EXT_WBINFO_GROUP_ACL.PL.IN 1 "2013-03-01" "perl v5.10.1" "User Contributed Perl Documentation"
+.TH EXT_WBINFO_GROUP_ACL.PL.IN 1 "2013-03-12" "perl v5.10.1" "User Contributed Perl Documentation"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
diff -u -r -N squid-3.3.2/helpers/log_daemon/DB/log_db_daemon.8 squid-3.3.3/helpers/log_daemon/DB/log_db_daemon.8
--- squid-3.3.2/helpers/log_daemon/DB/log_db_daemon.8	2013-03-02 16:01:21.000000000 +1300
+++ squid-3.3.3/helpers/log_daemon/DB/log_db_daemon.8	2013-03-12 23:47:18.000000000 +1300
@@ -124,7 +124,7 @@
 .\" ========================================================================
 .\"
 .IX Title "LOG_DB_DAEMON 1"
-.TH LOG_DB_DAEMON 1 "2013-03-01" "perl v5.10.1" "User Contributed Perl Documentation"
+.TH LOG_DB_DAEMON 1 "2013-03-12" "perl v5.10.1" "User Contributed Perl Documentation"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
diff -u -r -N squid-3.3.2/include/version.h squid-3.3.3/include/version.h
--- squid-3.3.2/include/version.h	2013-03-02 15:38:13.000000000 +1300
+++ squid-3.3.3/include/version.h	2013-03-12 23:18:22.000000000 +1300
@@ -7,7 +7,7 @@
  */
 
 #ifndef SQUID_RELEASE_TIME
-#define SQUID_RELEASE_TIME 1362191814
+#define SQUID_RELEASE_TIME 1363083425
 #endif
 
 #ifndef APP_SHORTNAME
diff -u -r -N squid-3.3.2/RELEASENOTES.html squid-3.3.3/RELEASENOTES.html
--- squid-3.3.2/RELEASENOTES.html	2013-03-02 16:01:40.000000000 +1300
+++ squid-3.3.3/RELEASENOTES.html	2013-03-12 23:47:40.000000000 +1300
@@ -2,10 +2,10 @@
 <HTML>
 <HEAD>
  <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.66">
- <TITLE>Squid 3.3.1 release notes</TITLE>
+ <TITLE>Squid 3.3.3 release notes</TITLE>
 </HEAD>
 <BODY>
-<H1>Squid 3.3.1 release notes</H1>
+<H1>Squid 3.3.3 release notes</H1>
 
 <H2>Squid Developers</H2>
 <HR>
@@ -56,11 +56,14 @@
 <HR>
 <H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
 
-<P>The Squid Team are pleased to announce the release of Squid-3.3.1 for testing.</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.3.3.</P>
 <P>This new release is available for download from 
 <A HREF="http://www.squid-cache.org/Versions/v3/3.3/">http://www.squid-cache.org/Versions/v3/3.3/</A> or the 
 <A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
-<P>While this release is not deemed ready for production use, we believe it is ready for wider testing by the community.</P>
+
+<P>A large number of the design flaws in SSL-Bump feature have been fixed along with general improvements all around.
+While this release is not fully bug-free we believe it is ready for use in production on many systems.</P>
+
 <P>We welcome feedback and bug reports. If you find a bug, please see 
 <A HREF="http://wiki.squid-cache.org/SquidFaq/BugReporting">http://wiki.squid-cache.org/SquidFaq/BugReporting</A>
 for how to submit a report with a stack trace.</P>
diff -u -r -N squid-3.3.2/src/comm/ModDevPoll.cc squid-3.3.3/src/comm/ModDevPoll.cc
--- squid-3.3.2/src/comm/ModDevPoll.cc	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/comm/ModDevPoll.cc	2013-03-12 23:17:07.000000000 +1300
@@ -53,6 +53,7 @@
 #if USE_DEVPOLL
 
 #include "comm/Loops.h"
+#include "fd.h"
 #include "fde.h"
 #include "mgr/Registration.h"
 #include "profiler/Profiler.h"
@@ -68,10 +69,13 @@
 #if HAVE_ERRNO_H
 #include <errno.h>
 #endif
+#if HAVE_LIMITS_H
+#include <limits.h>
+#endif
 
 #define DEBUG_DEVPOLL 0
 
-/* OPEN_MAX is defined in <limits.h>, presumably included by sys/devpoll.h */
+// OPEN_MAX is defined in <limits.h>
 #define	DEVPOLL_UPDATESIZE	OPEN_MAX
 #define	DEVPOLL_QUERYSIZE	OPEN_MAX
 
diff -u -r -N squid-3.3.2/src/errorpage.cc squid-3.3.3/src/errorpage.cc
--- squid-3.3.2/src/errorpage.cc	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/errorpage.cc	2013-03-12 23:17:07.000000000 +1300
@@ -381,17 +381,9 @@
     while (pos < hdr.size()) {
         char *dt = lang;
 
-        if (!pos) {
-            /* skip any initial whitespace. */
-            while (pos < hdr.size() && xisspace(hdr[pos]))
-                ++pos;
-        } else {
-            // IFF we terminated the tag on whitespace or ';' we need to skip to the next ',' or end of header.
-            while (pos < hdr.size() && hdr[pos] != ',')
-                ++pos;
-            if (hdr[pos] == ',')
-                ++pos;
-        }
+        /* skip any initial whitespace. */
+        while (pos < hdr.size() && xisspace(hdr[pos]))
+            ++pos;
 
         /*
          * Header value format:
@@ -422,6 +414,13 @@
         *dt = '\0'; // nul-terminated the filename content string before system use.
         ++dt;
 
+        // if we terminated the tag on garbage or ';' we need to skip to the next ',' or end of header.
+        while (pos < hdr.size() && hdr[pos] != ',')
+            ++pos;
+
+        if (pos < hdr.size() && hdr[pos] == ',')
+            ++pos;
+
         debugs(4, 9, HERE << "STATE: dt='" << dt << "', lang='" << lang << "', pos=" << pos << ", buf='" << ((pos < hdr.size()) ? hdr.substr(pos,hdr.size()) : "") << "'");
 
         /* if we found anything we might use, try it. */
diff -u -r -N squid-3.3.2/src/errorpage.h squid-3.3.3/src/errorpage.h
--- squid-3.3.2/src/errorpage.h	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/errorpage.h	2013-03-12 23:17:07.000000000 +1300
@@ -315,11 +315,16 @@
 /**
  * Parses the Accept-Language header value and return one language item on
  * each call.
+ * Will ignore any whitespace, q-values, and detectably invalid language
+ * codes in the header.
+ *
  * \param hdr is the Accept-Language header value
- * \param lang a buffer given by the user to store parsed language
+ * \param lang a buffer to store parsed language code in
  * \param langlen the length of the lang buffer
- * \param pos it is used to store the state of parsing. Must be "0" on first call
- * \return true on success, false otherwise
+ * \param pos is used to store the offset state of parsing. Must be "0" on first call.
+ *            Will be altered to point at the start of next field-value.
+ * \return true if something looking like a language token has been placed in lang, false otherwise
  */
 bool strHdrAcptLangGetItem(const String &hdr, char *lang, int langLen, size_t &pos);
+
 #endif /* SQUID_ERRORPAGE_H */
diff -u -r -N squid-3.3.2/src/peer_digest.cc squid-3.3.3/src/peer_digest.cc
--- squid-3.3.2/src/peer_digest.cc	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/peer_digest.cc	2013-03-12 23:17:07.000000000 +1300
@@ -347,9 +347,14 @@
 
     req->header.putStr(HDR_ACCEPT, "text/html");
 
-    if (p->login)
+    if (p->login &&
+            p->login[0] != '*' &&
+            strcmp(p->login, "PASS") != 0 &&
+            strcmp(p->login, "PASSTHRU") != 0 &&
+            strcmp(p->login, "NEGOTIATE") != 0 &&
+            strcmp(p->login, "PROXYPASS") != 0) {
         xstrncpy(req->login, p->login, MAX_LOGIN_SZ);
-
+    }
     /* create fetch state structure */
     CBDATA_INIT_TYPE(DigestFetchState);
 
diff -u -r -N squid-3.3.2/src/peer_select.cc squid-3.3.3/src/peer_select.cc
--- squid-3.3.2/src/peer_select.cc	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/peer_select.cc	2013-03-12 23:17:07.000000000 +1300
@@ -55,6 +55,7 @@
 #include "SquidConfig.h"
 #include "SquidTime.h"
 #include "Store.h"
+#include "URL.h"
 
 static struct {
     int timeouts;
@@ -285,15 +286,10 @@
     PSC *callback = psstate->callback;
     psstate->callback = NULL;
 
-    if (psstate->paths->size() < 1) {
-        debugs(44, DBG_IMPORTANT, "Failed to select source for '" << psstate->entry->url() << "'");
-        debugs(44, DBG_IMPORTANT, "  always_direct = " << psstate->always_direct);
-        debugs(44, DBG_IMPORTANT, "   never_direct = " << psstate->never_direct);
-        debugs(44, DBG_IMPORTANT, "       timedout = " << psstate->ping.timedout);
-    } else {
-        debugs(44, 2, "Found sources for '" << psstate->entry->url() << "'");
-        debugs(44, 2, "  always_direct = " << psstate->always_direct);
-        debugs(44, 2, "   never_direct = " << psstate->never_direct);
+    debugs(44, 2, (psstate->paths->size()<1?"Failed to select source":"Found sources") << " for '" << psstate->url() << "'");
+    debugs(44, 2, "  always_direct = " << psstate->always_direct);
+    debugs(44, 2, "   never_direct = " << psstate->never_direct);
+    if (psstate->paths) {
         for (size_t i = 0; i < psstate->paths->size(); ++i) {
             if ((*psstate->paths)[i]->peerType == HIER_DIRECT)
                 debugs(44, 2, "         DIRECT = " << (*psstate->paths)[i]);
@@ -304,8 +300,8 @@
             else
                 debugs(44, 2, "     cache_peer = " << (*psstate->paths)[i]);
         }
-        debugs(44, 2, "       timedout = " << psstate->ping.timedout);
     }
+    debugs(44, 2, "       timedout = " << psstate->ping.timedout);
 
     psstate->ping.stop = current_time;
     psstate->request->hier.ping = psstate->ping;
@@ -971,6 +967,18 @@
     ; // no local defaults.
 }
 
+const char *
+ps_state::url() const
+{
+    if (entry)
+        return entry->url();
+
+    if (request)
+        return urlCanonical(request);
+
+    return "[no URL]";
+}
+
 ping_data::ping_data() :
         n_sent(0),
         n_recv(0),
diff -u -r -N squid-3.3.2/src/PeerSelectState.h squid-3.3.3/src/PeerSelectState.h
--- squid-3.3.2/src/PeerSelectState.h	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/PeerSelectState.h	2013-03-12 23:17:07.000000000 +1300
@@ -73,6 +73,11 @@
 public:
     void *operator new(size_t);
     ps_state();
+
+    // Produce a URL for display identifying the transaction we are
+    // trying to locate a peer for.
+    const char * url() const;
+
     HttpRequest *request;
     StoreEntry *entry;
     allow_t always_direct;
diff -u -r -N squid-3.3.2/src/store_dir.cc squid-3.3.3/src/store_dir.cc
--- squid-3.3.2/src/store_dir.cc	2013-03-02 15:36:58.000000000 +1300
+++ squid-3.3.3/src/store_dir.cc	2013-03-12 23:17:07.000000000 +1300
@@ -56,6 +56,9 @@
 #if HAVE_SYS_PARAM_H
 #include <sys/param.h>
 #endif
+#if HAVE_LIMITS_H
+#include <limits.h>
+#endif
 #if HAVE_SYS_MOUNT_H
 #include <sys/mount.h>
 #endif
