Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix xfontsel to find the app defaults file. #7

Closed
wants to merge 1 commit into from

Conversation

aszlig
Copy link
Member

@aszlig aszlig commented Jun 6, 2012

No description provided.

@peti
Copy link
Member

peti commented Jun 11, 2012

Committed in r34443.

@aszlig aszlig closed this Jun 11, 2012
oxij added a commit to oxij/nixpkgs that referenced this pull request Apr 22, 2018
With hardening enabled it reports errors on known-good memory modules
on my Thinkpad X230 (Ivy Bridge). It's the same bug as reported in
https://bugs.launchpad.net/ubuntu/+source/memtest86+/+bug/1071209 but
memtest86+ fails on test NixOS#9 instead of test NixOS#7 (because NixOS#7 in 4.20
became NixOS#9 in 5.01) and with all the addresses multiplied by 2 (I guess
the bug was reported for i686, and I test on x86_64, it was 2012 after
all).
dezgeg pushed a commit that referenced this pull request Apr 22, 2018
With hardening enabled it reports errors on known-good memory modules
on my Thinkpad X230 (Ivy Bridge). It's the same bug as reported in
https://bugs.launchpad.net/ubuntu/+source/memtest86+/+bug/1071209 but
memtest86+ fails on test #9 instead of test #7 (because #7 in 4.20
became #9 in 5.01) and with all the addresses multiplied by 2 (I guess
the bug was reported for i686, and I test on x86_64, it was 2012 after
all).
dtzWill added a commit to dtzWill/nixpkgs that referenced this pull request Jun 17, 2018
Maybe same problem as on Darwin, unsure.

From gdb:

> Thread 1 (process 23820):
> #0  0x00007ffff7dab684 in __syscall_cp_c () from target:/nix/store/66m5z7marjbs7pa3gv8sf5j1qrqjacfj-musl-1.1.19/lib/ld-musl-x86_64.so.1
> #1  0x00007ffff7daac69 in __timedwait_cp () from target:/nix/store/66m5z7marjbs7pa3gv8sf5j1qrqjacfj-musl-1.1.19/lib/ld-musl-x86_64.so.1
> #2  0x00007ffff7daad17 in __timedwait () from target:/nix/store/66m5z7marjbs7pa3gv8sf5j1qrqjacfj-musl-1.1.19/lib/ld-musl-x86_64.so.1
> #3  0x00007ffff7dacaf4 in pthread_mutex_timedlock () from target:/nix/store/66m5z7marjbs7pa3gv8sf5j1qrqjacfj-musl-1.1.19/lib/ld-musl-x86_64.so.1
> NixOS#4  0x00007ffff781e409 in _gpgrt_lock_lock () from target:/nix/store/f7qid95jabfr665qc1kbcl6adf48gq7w-libgpg-error-1.28/lib/libgpg-error.so.0
> NixOS#5  0x00007ffff7b035d5 in lock_rng () at ./rndjent.c:212
> NixOS#6  0x00007ffff7b036ab in _gcry_rndjent_poll (add=0x0, origin=RANDOM_ORIGIN_INIT, length=0) at ./rndjent.c:268
> NixOS#7  0x00007ffff7b038cf in _gcry_rndjent_get_version (r_active=0x7fffffffc800) at ./rndjent.c:339
> NixOS#8  0x00007ffff7a44f7f in print_config (fp=0x6026e0, what=0x0) at global.c:391
> NixOS#9  _gcry_get_config (mode=mode@entry=0, what=<optimized out>, what@entry=0x0) at global.c:420
> NixOS#10 0x00007ffff7a456a3 in _gcry_vcontrol (cmd=<optimized out>, arg_ptr=<optimized out>) at global.c:652
> NixOS#11 0x00007ffff7a41689 in gcry_control (cmd=cmd@entry=GCRYCTL_PRINT_CONFIG) at visibility.c:79
> NixOS#12 0x0000000000400ec3 in main (argc=<optimized out>, argv=<optimized out>) at version.c:160
dingxiangfei2009 pushed a commit to dingxiangfei2009/nixpkgs that referenced this pull request Jan 9, 2019
Add `github-release` and `s3` resource types
purcell pushed a commit to purcell/nixpkgs that referenced this pull request Feb 13, 2020
…ce-path

buildRustCrate: remap the current build dir to / for (more) reproducible builds
@GTrunSec GTrunSec mentioned this pull request Feb 20, 2020
8 tasks
@Valodim Valodim mentioned this pull request Feb 28, 2020
10 tasks
@collares collares mentioned this pull request Dec 2, 2020
10 tasks
primeos added a commit to primeos/nixpkgs that referenced this pull request May 27, 2021
FAIL: LLVM :: DebugInfo/X86/vla-multi.ll (25780 of 42068)
******************** TEST 'LLVM :: DebugInfo/X86/vla-multi.ll' FAILED ********************
Script:
--
: 'RUN: at line 1';   /build/llvm/build/bin/llc -mtriple=x86_64-apple-darwin /build/llvm/test/DebugInfo/X86/vla-multi.ll -o - -filetype=obj | /build/llvm/build/bin/llvm-dwarfdump - | /build/llvm/build/bin/FileCheck --allow-unused-prefixes=false /build/llvm/test/DebugInfo/X86/vla-multi.ll
--
Exit Code: 2

Command Output (stderr):
--
PLEASE submit a bug report to https://bugs.llvm.org/ and include the crash backtrace.
Stack dump:
0.      Program arguments: /build/llvm/build/bin/llc -mtriple=x86_64-apple-darwin /build/llvm/test/DebugInfo/X86/vla-multi.ll -o - -filetype=obj
 #0 0x00007ffff286ac1d llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/build/llvm/build/lib/libLLVM-12.so+0xd51c1d)
 #1 0x00007ffff2868924 llvm::sys::RunSignalHandlers() (/build/llvm/build/lib/libLLVM-12.so+0xd4f924)
 #2 0x00007ffff2868a9b SignalHandler(int) (/build/llvm/build/lib/libLLVM-12.so+0xd4fa9b)
 #3 0x00007ffff1b0b700 __restore_rt (/nix/store/sbbifs2ykc05inws26203h0xwcadnf0l-glibc-2.32-46/lib/libpthread.so.0+0x13700)
 #4 0x00007ffff31c2430 llvm::DIE::getUnitDie() const (/build/llvm/build/lib/libLLVM-12.so+0x16a9430)
 NixOS#5 0x00007ffff31e0f5c llvm::DwarfDebug::finishEntityDefinitions() (/build/llvm/build/lib/libLLVM-12.so+0x16c7f5c)
 NixOS#6 0x00007ffff31f9415 llvm::DwarfDebug::finalizeModuleInfo() (/build/llvm/build/lib/libLLVM-12.so+0x16e0415)
 NixOS#7 0x00007ffff31fc558 llvm::DwarfDebug::endModule() (/build/llvm/build/lib/libLLVM-12.so+0x16e3558)
 NixOS#8 0x00007ffff31ab659 llvm::AsmPrinter::doFinalization(llvm::Module&) (/build/llvm/build/lib/libLLVM-12.so+0x1692659)
 NixOS#9 0x00007ffff29ab77d llvm::FPPassManager::doFinalization(llvm::Module&) (.localalias) (/build/llvm/build/lib/libLLVM-12.so+0xe9277d)
NixOS#10 0x00007ffff29b7570 llvm::legacy::PassManagerImpl::run(llvm::Module&) (/build/llvm/build/lib/libLLVM-12.so+0xe9e570)
NixOS#11 0x0000000000415bbf compileModule(char**, llvm::LLVMContext&) (/build/llvm/build/bin/llc+0x415bbf)
NixOS#12 0x000000000040e582 main (/build/llvm/build/bin/llc+0x40e582)
NixOS#13 0x00007ffff162aded __libc_start_main (/nix/store/sbbifs2ykc05inws26203h0xwcadnf0l-glibc-2.32-46/lib/libc.so.6+0x27ded)
NixOS#14 0x000000000040eb5a _start /build/glibc-2.32/csu/../sysdeps/x86_64/start.S:122:0
error: -: The file was not recognized as a valid object file
FileCheck error: '<stdin>' is empty.
FileCheck command line:  /build/llvm/build/bin/FileCheck --allow-unused-prefixes=false /build/llvm/test/DebugInfo/X86/vla-multi.ll

--

********************
0x4A6F added a commit to 0x4A6F/nixpkgs that referenced this pull request May 1, 2023
TODO: riscv64-linux support
-> configure: error: Unsupported host architecture. Sorry

```
copying path '/nix/store/0l591mfab7wpi0npvipcvw2hc563a5pz-attachment.cgi?id=148912' from 'https://cache.nixos.org'...
copying path '/nix/store/5kj0bygmawclh3sv9qxd6m01bknnpn4h-attachment.cgi?id=149172' from 'https://cache.nixos.org'...
copying path '/nix/store/8bi7cd4h9bsi08014pciq4znsz3rm0p3-attachment.cgi?id=149174' from 'https://cache.nixos.org'...
copying path '/nix/store/54ymrdbm76hgfcja30403wgvkd64sm8a-attachment.cgi?id=149173' from 'https://cache.nixos.org'...
copying path '/nix/store/k09gxfmfpd4x9h1nva8igfbz7zh94xgy-elfv2-ppc64-be.patch' from 'https://cache.nixos.org'...
copying path '/nix/store/fq5r10nswpwb709l87jphx6yc8rbq186-valgrind-3.20.0.tar.bz2' from 'https://cache.nixos.org'...
unpacking sources
unpacking source archive /nix/store/fq5r10nswpwb709l87jphx6yc8rbq186-valgrind-3.20.0.tar.bz2
source root is valgrind-3.20.0
setting SOURCE_DATE_EPOCH to timestamp 1666612870 of file valgrind-3.20.0/docs/vgdb.1
patching sources
applying patch /nix/store/k09gxfmfpd4x9h1nva8igfbz7zh94xgy-elfv2-ppc64-be.patch
patching file coregrind/m_dispatch/dispatch-ppc64be-linux.S
Hunk #1 succeeded at 86 (offset -2 lines).
Hunk NixOS#2 succeeded at 255 (offset -1 lines).
patching file coregrind/m_initimg/initimg-linux.c
Hunk #1 succeeded at 1206 (offset 89 lines).
patching file coregrind/m_libcsetjmp.c
Hunk #1 succeeded at 33 (offset -2 lines).
Hunk NixOS#2 succeeded at 150 (offset -2 lines).
Hunk NixOS#3 succeeded at 270 (offset -2 lines).
patching file coregrind/m_machine.c
Hunk #1 succeeded at 2383 (offset 285 lines).
patching file coregrind/m_main.c
Hunk #1 succeeded at 2393 (offset 90 lines).
Hunk NixOS#2 succeeded at 2426 (offset 90 lines).
Hunk NixOS#3 succeeded at 2750 (offset 91 lines).
Hunk NixOS#4 succeeded at 2797 (offset 91 lines).
patching file coregrind/m_sigframe/sigframe-ppc64-linux.c
Hunk #1 succeeded at 261 (offset -2 lines).
patching file coregrind/m_signals.c
Hunk #1 succeeded at 955 (offset 58 lines).
Hunk NixOS#2 succeeded at 972 (offset 58 lines).
patching file coregrind/m_stacktrace.c
Hunk #1 succeeded at 747 (offset 21 lines).
Hunk NixOS#2 succeeded at 809 (offset 21 lines).
Hunk NixOS#3 succeeded at 862 (offset 21 lines).
Hunk NixOS#4 succeeded at 882 (offset 21 lines).
patching file coregrind/m_syscall.c
Hunk #1 succeeded at 539 (offset 69 lines).
Hunk NixOS#2 succeeded at 576 (offset 69 lines).
patching file coregrind/m_syswrap/syscall-ppc64be-linux.S
Hunk #1 succeeded at 74 (offset -2 lines).
Hunk NixOS#2 succeeded at 156 (offset -2 lines).
patching file coregrind/m_syswrap/syswrap-ppc64-linux.c
Hunk #1 succeeded at 39 (offset -2 lines).
Hunk NixOS#2 succeeded at 75 (offset -2 lines).
Hunk NixOS#3 succeeded at 126 (offset -2 lines).
Hunk NixOS#4 succeeded at 211 (offset -2 lines).
patching file coregrind/m_trampoline.S
Hunk #1 succeeded at 467 (offset -2 lines).
patching file coregrind/m_translate.c
Hunk #1 succeeded at 1016 (offset 10 lines).
Hunk NixOS#2 succeeded at 1245 (offset 10 lines).
Hunk NixOS#3 succeeded at 1275 (offset 10 lines).
Hunk NixOS#4 succeeded at 1298 (offset 10 lines).
Hunk NixOS#5 succeeded at 1379 (offset 10 lines).
Hunk NixOS#6 succeeded at 1435 (offset 10 lines).
Hunk NixOS#7 succeeded at 1658 (offset 10 lines).
Hunk NixOS#8 succeeded at 1706 (offset 13 lines).
patching file coregrind/m_ume/elf.c
Hunk #1 succeeded at 856 (offset 9 lines).
Hunk NixOS#2 succeeded at 865 (offset 9 lines).
patching file coregrind/pub_core_machine.h
Hunk #1 succeeded at 58 (offset -2 lines).
patching file coregrind/vg_preloaded.c
Hunk #1 succeeded at 43 with fuzz 1 (offset -2 lines).
Hunk NixOS#2 succeeded at 105 (offset 1 line).
patching file include/valgrind.h
Hunk #1 succeeded at 151 (offset 8 lines).
patching file memcheck/mc_leakcheck.c
Hunk #1 succeeded at 651 (offset -2 lines).
patching file memcheck/mc_machine.c
Hunk #1 succeeded at 130 (offset -2 lines).
applying patch /nix/store/0l591mfab7wpi0npvipcvw2hc563a5pz-attachment.cgi?id=148912
patching file memcheck/tests/arm64-linux/scalar.h
patching file memcheck/tests/x86-linux/scalar.h
applying patch /nix/store/5kj0bygmawclh3sv9qxd6m01bknnpn4h-attachment.cgi?id=149172
patching file none/tests/arm/Makefile.am
applying patch /nix/store/54ymrdbm76hgfcja30403wgvkd64sm8a-attachment.cgi?id=149173
patching file memcheck/tests/sh-mem-random.c
applying patch /nix/store/8bi7cd4h9bsi08014pciq4znsz3rm0p3-attachment.cgi?id=149174
patching file Makefile.all.am
patching file helgrind/tests/Makefile.am
patching file none/tests/arm/Makefile.am
autoreconfPhase
autoreconf: export WARNINGS=
autoreconf: Entering directory '.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force
autoreconf: configure.ac: tracing
autoreconf: configure.ac: not using Libtool
autoreconf: configure.ac: not using Intltool
autoreconf: configure.ac: not using Gtkdoc
autoreconf: running: /nix/store/ncj4sssb2nxdk48flyxk43cyfv569248-autoconf-2.71/bin/autoconf --force
configure.ac:140: warning: The macro `AC_PROG_CC_C99' is obsolete.
configure.ac:140: You should run autoupdate.
./lib/autoconf/c.m4:1659: AC_PROG_CC_C99 is expanded from...
configure.ac:140: the top level
autoreconf: running: /nix/store/ncj4sssb2nxdk48flyxk43cyfv569248-autoconf-2.71/bin/autoheader --force
autoreconf: running: automake --add-missing --copy --force-missing
autoreconf: Leaving directory '.'
autoreconfPhase completed in 1 minutes 30 seconds
updateAutotoolsGnuConfigScriptsPhase
Updating Autotools / GNU config script to a newer upstream version: ./config.sub
Updating Autotools / GNU config script to a newer upstream version: ./config.guess
configuring
configure flags: --disable-dependency-tracking --prefix=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0 --bindir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/bin --sbindir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/sbin --includedir=/nix/store/zlwg789mqc2hp1zy1hh3whlp612msm5w-valgrind-3.20.0-dev/include --oldincludedir=/nix/store/zlwg789mqc2hp1zy1hh3whlp612msm5w-valgrind-3.20.0-dev/include --mandir=/nix/store/9awl3c5hyng7prsapggkrlz5phs45zjb-valgrind-3.20.0-man/share/man --infodir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/share/info --docdir=/nix/store/4hh37s3zxm0vi3j45pkzpgh5qbcwqfff-valgrind-3.20.0-doc/share/doc/valgrind --libdir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/lib --libexecdir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/libexec --localedir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/share/locale
checking for a BSD-compatible install... /nix/store/jddgwf186d0sqajjv4iibnnpc6dfxj7x-coreutils-9.1/bin/install -c
checking whether build environment is sane... yes
checking for a race-free mkdir -p... /nix/store/jddgwf186d0sqajjv4iibnnpc6dfxj7x-coreutils-9.1/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether ln -s works... yes
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether gcc accepts -g... yes
checking for gcc option to enable C11 features... none needed
checking whether gcc understands -c and -o together... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of gcc... none
checking how to run the C preprocessor... gcc -E
checking whether the compiler supports GNU C++... yes
checking whether g++ accepts -g... yes
checking for g++ option to enable C++11 features... none needed
checking dependency style of g++... none
checking for ranlib... ranlib
checking for gcc-ranlib... /nix/store/fpvd6m6822fgc9rjq8hbs67dh154pr0c-gcc-12.2.0/bin/gcc-ranlib
checking for a sed that does not truncate output... /nix/store/6lac07v5y4mwbca83sgfgn6hvkn4blz7-gnused-4.9/bin/sed
checking for gcc-ar... /nix/store/fpvd6m6822fgc9rjq8hbs67dh154pr0c-gcc-12.2.0/bin/gcc-ar
checking for perl... /nix/store/fgkv333lywsz5x7pr6dx2n3mm8gc7s0c-perl-5.36.0/bin/perl
checking for gdb... /nix/store/4xpnrwacahz4m6s56h4k88sdwajj2zis-gdb-13.1/bin/gdb
checking dependency style of gcc... none
checking for diff -u... yes
checking for a supported version of gcc... ok (12.2.0)
checking build system type... riscv64-unknown-linux-gnu
checking host system type... riscv64-unknown-linux-gnu
checking for a supported CPU... no (riscv64)
configure: error: Unsupported host architecture. Sorry
```
0x4A6F added a commit to 0x4A6F/nixpkgs that referenced this pull request May 1, 2023
TODO: riscv64-linux support
-> configure: error: Unsupported host architecture. Sorry

```
copying path '/nix/store/0l591mfab7wpi0npvipcvw2hc563a5pz-attachment.cgi?id=148912' from 'https://cache.nixos.org'...
copying path '/nix/store/5kj0bygmawclh3sv9qxd6m01bknnpn4h-attachment.cgi?id=149172' from 'https://cache.nixos.org'...
copying path '/nix/store/8bi7cd4h9bsi08014pciq4znsz3rm0p3-attachment.cgi?id=149174' from 'https://cache.nixos.org'...
copying path '/nix/store/54ymrdbm76hgfcja30403wgvkd64sm8a-attachment.cgi?id=149173' from 'https://cache.nixos.org'...
copying path '/nix/store/k09gxfmfpd4x9h1nva8igfbz7zh94xgy-elfv2-ppc64-be.patch' from 'https://cache.nixos.org'...
copying path '/nix/store/fq5r10nswpwb709l87jphx6yc8rbq186-valgrind-3.20.0.tar.bz2' from 'https://cache.nixos.org'...
unpacking sources
unpacking source archive /nix/store/fq5r10nswpwb709l87jphx6yc8rbq186-valgrind-3.20.0.tar.bz2
source root is valgrind-3.20.0
setting SOURCE_DATE_EPOCH to timestamp 1666612870 of file valgrind-3.20.0/docs/vgdb.1
patching sources
applying patch /nix/store/k09gxfmfpd4x9h1nva8igfbz7zh94xgy-elfv2-ppc64-be.patch
patching file coregrind/m_dispatch/dispatch-ppc64be-linux.S
Hunk #1 succeeded at 86 (offset -2 lines).
Hunk NixOS#2 succeeded at 255 (offset -1 lines).
patching file coregrind/m_initimg/initimg-linux.c
Hunk #1 succeeded at 1206 (offset 89 lines).
patching file coregrind/m_libcsetjmp.c
Hunk #1 succeeded at 33 (offset -2 lines).
Hunk NixOS#2 succeeded at 150 (offset -2 lines).
Hunk NixOS#3 succeeded at 270 (offset -2 lines).
patching file coregrind/m_machine.c
Hunk #1 succeeded at 2383 (offset 285 lines).
patching file coregrind/m_main.c
Hunk #1 succeeded at 2393 (offset 90 lines).
Hunk NixOS#2 succeeded at 2426 (offset 90 lines).
Hunk NixOS#3 succeeded at 2750 (offset 91 lines).
Hunk NixOS#4 succeeded at 2797 (offset 91 lines).
patching file coregrind/m_sigframe/sigframe-ppc64-linux.c
Hunk #1 succeeded at 261 (offset -2 lines).
patching file coregrind/m_signals.c
Hunk #1 succeeded at 955 (offset 58 lines).
Hunk NixOS#2 succeeded at 972 (offset 58 lines).
patching file coregrind/m_stacktrace.c
Hunk #1 succeeded at 747 (offset 21 lines).
Hunk NixOS#2 succeeded at 809 (offset 21 lines).
Hunk NixOS#3 succeeded at 862 (offset 21 lines).
Hunk NixOS#4 succeeded at 882 (offset 21 lines).
patching file coregrind/m_syscall.c
Hunk #1 succeeded at 539 (offset 69 lines).
Hunk NixOS#2 succeeded at 576 (offset 69 lines).
patching file coregrind/m_syswrap/syscall-ppc64be-linux.S
Hunk #1 succeeded at 74 (offset -2 lines).
Hunk NixOS#2 succeeded at 156 (offset -2 lines).
patching file coregrind/m_syswrap/syswrap-ppc64-linux.c
Hunk #1 succeeded at 39 (offset -2 lines).
Hunk NixOS#2 succeeded at 75 (offset -2 lines).
Hunk NixOS#3 succeeded at 126 (offset -2 lines).
Hunk NixOS#4 succeeded at 211 (offset -2 lines).
patching file coregrind/m_trampoline.S
Hunk #1 succeeded at 467 (offset -2 lines).
patching file coregrind/m_translate.c
Hunk #1 succeeded at 1016 (offset 10 lines).
Hunk NixOS#2 succeeded at 1245 (offset 10 lines).
Hunk NixOS#3 succeeded at 1275 (offset 10 lines).
Hunk NixOS#4 succeeded at 1298 (offset 10 lines).
Hunk NixOS#5 succeeded at 1379 (offset 10 lines).
Hunk NixOS#6 succeeded at 1435 (offset 10 lines).
Hunk NixOS#7 succeeded at 1658 (offset 10 lines).
Hunk NixOS#8 succeeded at 1706 (offset 13 lines).
patching file coregrind/m_ume/elf.c
Hunk #1 succeeded at 856 (offset 9 lines).
Hunk NixOS#2 succeeded at 865 (offset 9 lines).
patching file coregrind/pub_core_machine.h
Hunk #1 succeeded at 58 (offset -2 lines).
patching file coregrind/vg_preloaded.c
Hunk #1 succeeded at 43 with fuzz 1 (offset -2 lines).
Hunk NixOS#2 succeeded at 105 (offset 1 line).
patching file include/valgrind.h
Hunk #1 succeeded at 151 (offset 8 lines).
patching file memcheck/mc_leakcheck.c
Hunk #1 succeeded at 651 (offset -2 lines).
patching file memcheck/mc_machine.c
Hunk #1 succeeded at 130 (offset -2 lines).
applying patch /nix/store/0l591mfab7wpi0npvipcvw2hc563a5pz-attachment.cgi?id=148912
patching file memcheck/tests/arm64-linux/scalar.h
patching file memcheck/tests/x86-linux/scalar.h
applying patch /nix/store/5kj0bygmawclh3sv9qxd6m01bknnpn4h-attachment.cgi?id=149172
patching file none/tests/arm/Makefile.am
applying patch /nix/store/54ymrdbm76hgfcja30403wgvkd64sm8a-attachment.cgi?id=149173
patching file memcheck/tests/sh-mem-random.c
applying patch /nix/store/8bi7cd4h9bsi08014pciq4znsz3rm0p3-attachment.cgi?id=149174
patching file Makefile.all.am
patching file helgrind/tests/Makefile.am
patching file none/tests/arm/Makefile.am
autoreconfPhase
autoreconf: export WARNINGS=
autoreconf: Entering directory '.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force
autoreconf: configure.ac: tracing
autoreconf: configure.ac: not using Libtool
autoreconf: configure.ac: not using Intltool
autoreconf: configure.ac: not using Gtkdoc
autoreconf: running: /nix/store/ncj4sssb2nxdk48flyxk43cyfv569248-autoconf-2.71/bin/autoconf --force
configure.ac:140: warning: The macro `AC_PROG_CC_C99' is obsolete.
configure.ac:140: You should run autoupdate.
./lib/autoconf/c.m4:1659: AC_PROG_CC_C99 is expanded from...
configure.ac:140: the top level
autoreconf: running: /nix/store/ncj4sssb2nxdk48flyxk43cyfv569248-autoconf-2.71/bin/autoheader --force
autoreconf: running: automake --add-missing --copy --force-missing
autoreconf: Leaving directory '.'
autoreconfPhase completed in 1 minutes 30 seconds
updateAutotoolsGnuConfigScriptsPhase
Updating Autotools / GNU config script to a newer upstream version: ./config.sub
Updating Autotools / GNU config script to a newer upstream version: ./config.guess
configuring
configure flags: --disable-dependency-tracking --prefix=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0 --bindir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/bin --sbindir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/sbin --includedir=/nix/store/zlwg789mqc2hp1zy1hh3whlp612msm5w-valgrind-3.20.0-dev/include --oldincludedir=/nix/store/zlwg789mqc2hp1zy1hh3whlp612msm5w-valgrind-3.20.0-dev/include --mandir=/nix/store/9awl3c5hyng7prsapggkrlz5phs45zjb-valgrind-3.20.0-man/share/man --infodir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/share/info --docdir=/nix/store/4hh37s3zxm0vi3j45pkzpgh5qbcwqfff-valgrind-3.20.0-doc/share/doc/valgrind --libdir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/lib --libexecdir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/libexec --localedir=/nix/store/fphvjd8jmb4mxbdzl0idyif64bl60mip-valgrind-3.20.0/share/locale
checking for a BSD-compatible install... /nix/store/jddgwf186d0sqajjv4iibnnpc6dfxj7x-coreutils-9.1/bin/install -c
checking whether build environment is sane... yes
checking for a race-free mkdir -p... /nix/store/jddgwf186d0sqajjv4iibnnpc6dfxj7x-coreutils-9.1/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether ln -s works... yes
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether the compiler supports GNU C... yes
checking whether gcc accepts -g... yes
checking for gcc option to enable C11 features... none needed
checking whether gcc understands -c and -o together... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of gcc... none
checking how to run the C preprocessor... gcc -E
checking whether the compiler supports GNU C++... yes
checking whether g++ accepts -g... yes
checking for g++ option to enable C++11 features... none needed
checking dependency style of g++... none
checking for ranlib... ranlib
checking for gcc-ranlib... /nix/store/fpvd6m6822fgc9rjq8hbs67dh154pr0c-gcc-12.2.0/bin/gcc-ranlib
checking for a sed that does not truncate output... /nix/store/6lac07v5y4mwbca83sgfgn6hvkn4blz7-gnused-4.9/bin/sed
checking for gcc-ar... /nix/store/fpvd6m6822fgc9rjq8hbs67dh154pr0c-gcc-12.2.0/bin/gcc-ar
checking for perl... /nix/store/fgkv333lywsz5x7pr6dx2n3mm8gc7s0c-perl-5.36.0/bin/perl
checking for gdb... /nix/store/4xpnrwacahz4m6s56h4k88sdwajj2zis-gdb-13.1/bin/gdb
checking dependency style of gcc... none
checking for diff -u... yes
checking for a supported version of gcc... ok (12.2.0)
checking build system type... riscv64-unknown-linux-gnu
checking host system type... riscv64-unknown-linux-gnu
checking for a supported CPU... no (riscv64)
configure: error: Unsupported host architecture. Sorry
```
nat-418 added a commit to nat-418/nixpkgs that referenced this pull request Jul 8, 2023
options.pair_additions -> additions
trofi added a commit to trofi/nixpkgs that referenced this pull request Aug 4, 2023
Without the change on current `master` `rtorrent` crashes at start as:

*** buffer overflow detected ***: terminated
                                                                                        __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44      pthread_kill.c: No such file or directory.
(gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007ffff7880af3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007ffff7831c86 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007ffff781b8ba in __GI_abort () at abort.c:79
    NixOS#4  0x00007ffff781c5f5 in __libc_message (fmt=fmt@entry=0x7ffff7992540 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007ffff7910679 in __GI___fortify_fail (msg=msg@entry=0x7ffff79924e6 "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007ffff790eea4 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00007ffff790ea85 in ___snprintf_chk (s=<optimized out>, maxlen=<optimized out>, flag=<optimized out>, slen=<optimized out>, format=<optimized out>) at snprintf_chk.c:29
    NixOS#8  0x0000000000472acf in utils::Lockfile::try_lock() ()
    NixOS#9  0x000000000044b524 in core::DownloadStore::enable(bool) ()
    NixOS#10 0x00000000004b1f7b in Control::initialize() ()
    NixOS#11 0x000000000043000b in main ()
trofi added a commit to trofi/nixpkgs that referenced this pull request Aug 4, 2023
Pull in _FORTIFY_SOURCE=3 stack smashing fix. Without the change on
current `master` `rtorrent` crashes at start as:

*** buffer overflow detected ***: terminated
                                                                                        __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44      pthread_kill.c: No such file or directory.
(gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007ffff7880af3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007ffff7831c86 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007ffff781b8ba in __GI_abort () at abort.c:79
    NixOS#4  0x00007ffff781c5f5 in __libc_message (fmt=fmt@entry=0x7ffff7992540 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007ffff7910679 in __GI___fortify_fail (msg=msg@entry=0x7ffff79924e6 "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007ffff790eea4 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00007ffff790ea85 in ___snprintf_chk (s=<optimized out>, maxlen=<optimized out>, flag=<optimized out>, slen=<optimized out>, format=<optimized out>) at snprintf_chk.c:29
    NixOS#8  0x0000000000472acf in utils::Lockfile::try_lock() ()
    NixOS#9  0x000000000044b524 in core::DownloadStore::enable(bool) ()
    NixOS#10 0x00000000004b1f7b in Control::initialize() ()
    NixOS#11 0x000000000043000b in main ()
trofi added a commit to trofi/nixpkgs that referenced this pull request Sep 13, 2023
Without the change on current `master` `rtorrent` crashes at start as:

*** buffer overflow detected ***: terminated
                                                                                        __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44      pthread_kill.c: No such file or directory.
(gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007ffff7880af3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007ffff7831c86 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007ffff781b8ba in __GI_abort () at abort.c:79
    NixOS#4  0x00007ffff781c5f5 in __libc_message (fmt=fmt@entry=0x7ffff7992540 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007ffff7910679 in __GI___fortify_fail (msg=msg@entry=0x7ffff79924e6 "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007ffff790eea4 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00007ffff790ea85 in ___snprintf_chk (s=<optimized out>, maxlen=<optimized out>, flag=<optimized out>, slen=<optimized out>, format=<optimized out>) at snprintf_chk.c:29
    NixOS#8  0x0000000000472acf in utils::Lockfile::try_lock() ()
    NixOS#9  0x000000000044b524 in core::DownloadStore::enable(bool) ()
    NixOS#10 0x00000000004b1f7b in Control::initialize() ()
    NixOS#11 0x000000000043000b in main ()
dadada added a commit to dadada/nixpkgs that referenced this pull request Oct 8, 2023
trofi added a commit to trofi/nixpkgs that referenced this pull request Nov 2, 2023
Without the change `zsnesn` startup crashes with:

    $ gdb zsnes
    *** buffer overflow detected ***: terminated
    ...
    NixOS#7  0x08057c14 in memset (__len=2, __ch=255, __dest=<optimized out>) at
      ...-glibc-2.38-23-dev/include/bits/string_fortified.h:59
trofi added a commit to trofi/nixpkgs that referenced this pull request Feb 28, 2024
Without the change `unnethack` startup crashes as:

    (gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007f734250c0e3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007f73424bce06 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007f73424a58f5 in __GI_abort () at abort.c:79
    NixOS#4  0x00007f73424a67a1 in __libc_message (fmt=fmt@entry=0x7f734261e2f8 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007f734259b1d9 in __GI___fortify_fail (msg=msg@entry=0x7f734261e2df "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007f734259ab94 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00000000005b2ac5 in strcpy (__src=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)",
        __dest=0x7ffe68838990 "\001") at /nix/store/B0S2LKF593R3585038WS4JD3LYLF2WDX-glibc-2.38-44-dev/include/bits/string_fortified.h:79
    NixOS#8  curses_break_str (str=str@entry=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)", width=width@entry=163,
        line_num=line_num@entry=1) at ../win/curses/cursmisc.c:275
    NixOS#9  0x00000000005b3f51 in curses_character_input_dialog (prompt=prompt@entry=0x7ffe68838cf0 "Shall I pick a character's race, role, gender and alignment for you?",
        choices=choices@entry=0x7ffe68838d70 "YNTQ", def=def@entry=121) at ../win/curses/cursdial.c:211
    NixOS#10 0x00000000005b9ca0 in curses_choose_character () at ../win/curses/cursinit.c:556
    NixOS#11 0x0000000000404eb1 in main (argc=<optimized out>, argv=<optimized out>) at ./../sys/unix/unixmain.c:309

which corresponds to `gcc` warning:

    ../win/curses/cursmisc.c: In function 'curses_break_str':
    ../win/curses/cursmisc.c:275:5: warning: '__builtin___strcpy_chk' writing one too many bytes into a region of a size that depends on 'strlen' [-Wstringop-overflow=]
      275 |     strcpy(substr, str);
          |     ^

I did not find a single small upstream change that fixes it. Let's
disable `fortify3` until next release.

Closes: NixOS#292113
Sanskarzz pushed a commit to Sanskarzz/nixpkgs that referenced this pull request Feb 29, 2024
Without the change `unnethack` startup crashes as:

    (gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007f734250c0e3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007f73424bce06 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007f73424a58f5 in __GI_abort () at abort.c:79
    NixOS#4  0x00007f73424a67a1 in __libc_message (fmt=fmt@entry=0x7f734261e2f8 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007f734259b1d9 in __GI___fortify_fail (msg=msg@entry=0x7f734261e2df "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007f734259ab94 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00000000005b2ac5 in strcpy (__src=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)",
        __dest=0x7ffe68838990 "\001") at /nix/store/B0S2LKF593R3585038WS4JD3LYLF2WDX-glibc-2.38-44-dev/include/bits/string_fortified.h:79
    NixOS#8  curses_break_str (str=str@entry=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)", width=width@entry=163,
        line_num=line_num@entry=1) at ../win/curses/cursmisc.c:275
    NixOS#9  0x00000000005b3f51 in curses_character_input_dialog (prompt=prompt@entry=0x7ffe68838cf0 "Shall I pick a character's race, role, gender and alignment for you?",
        choices=choices@entry=0x7ffe68838d70 "YNTQ", def=def@entry=121) at ../win/curses/cursdial.c:211
    NixOS#10 0x00000000005b9ca0 in curses_choose_character () at ../win/curses/cursinit.c:556
    NixOS#11 0x0000000000404eb1 in main (argc=<optimized out>, argv=<optimized out>) at ./../sys/unix/unixmain.c:309

which corresponds to `gcc` warning:

    ../win/curses/cursmisc.c: In function 'curses_break_str':
    ../win/curses/cursmisc.c:275:5: warning: '__builtin___strcpy_chk' writing one too many bytes into a region of a size that depends on 'strlen' [-Wstringop-overflow=]
      275 |     strcpy(substr, str);
          |     ^

I did not find a single small upstream change that fixes it. Let's
disable `fortify3` until next release.

Closes: NixOS#292113
ReedClanton pushed a commit to ReedClanton/nixpkgs that referenced this pull request Mar 4, 2024
Without the change `unnethack` startup crashes as:

    (gdb) bt
    #0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
    NixOS#1  0x00007f734250c0e3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
    NixOS#2  0x00007f73424bce06 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
    NixOS#3  0x00007f73424a58f5 in __GI_abort () at abort.c:79
    NixOS#4  0x00007f73424a67a1 in __libc_message (fmt=fmt@entry=0x7f734261e2f8 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150
    NixOS#5  0x00007f734259b1d9 in __GI___fortify_fail (msg=msg@entry=0x7f734261e2df "buffer overflow detected") at fortify_fail.c:24
    NixOS#6  0x00007f734259ab94 in __GI___chk_fail () at chk_fail.c:28
    NixOS#7  0x00000000005b2ac5 in strcpy (__src=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)",
        __dest=0x7ffe68838990 "\001") at /nix/store/B0S2LKF593R3585038WS4JD3LYLF2WDX-glibc-2.38-44-dev/include/bits/string_fortified.h:79
    NixOS#8  curses_break_str (str=str@entry=0x7ffe68838b00 "Shall I pick a character's race, role, gender and alignment for you? [YNTQ] (y)", width=width@entry=163,
        line_num=line_num@entry=1) at ../win/curses/cursmisc.c:275
    NixOS#9  0x00000000005b3f51 in curses_character_input_dialog (prompt=prompt@entry=0x7ffe68838cf0 "Shall I pick a character's race, role, gender and alignment for you?",
        choices=choices@entry=0x7ffe68838d70 "YNTQ", def=def@entry=121) at ../win/curses/cursdial.c:211
    NixOS#10 0x00000000005b9ca0 in curses_choose_character () at ../win/curses/cursinit.c:556
    NixOS#11 0x0000000000404eb1 in main (argc=<optimized out>, argv=<optimized out>) at ./../sys/unix/unixmain.c:309

which corresponds to `gcc` warning:

    ../win/curses/cursmisc.c: In function 'curses_break_str':
    ../win/curses/cursmisc.c:275:5: warning: '__builtin___strcpy_chk' writing one too many bytes into a region of a size that depends on 'strlen' [-Wstringop-overflow=]
      275 |     strcpy(substr, str);
          |     ^

I did not find a single small upstream change that fixes it. Let's
disable `fortify3` until next release.

Closes: NixOS#292113
j-openmesh referenced this pull request in Openmesh-Network/Xnodepkgs Jul 7, 2024
…shim

Add small kexec shim for systems that support cloud-init in the case that the cloud provider doesn't support any other method of booting our OS.
eclairevoyant added a commit to eclairevoyant/nixpkgs that referenced this pull request Jul 29, 2024
This adds some extremely helpful and popular encoders in by default:
* openjpeg
* celt
* libwebp
* libaom

On the `master` branch, closure size for ffmpeg-headless went up 18.5 MiB.
```
$ nix store diff-closures nixpkgs#ffmpeg-headless^bin .#ffmpeg-headless^bin
celt: ∅ → 0.11.3, +168.4 KiB
ffmpeg-headless: +70.0 KiB
giflib: ∅ → 5.2.2, +398.7 KiB
lcms2: ∅ → 2.16, +466.2 KiB
lerc: ∅ → 4.0.0, +840.2 KiB
libaom: ∅ → 3.9.0, +8047.8 KiB
libdeflate: ∅ → 1.20, +427.0 KiB
libtiff: ∅ → 4.6.0, +655.9 KiB
libvmaf: ∅ → 3.0.0, +2665.0 KiB
libwebp: ∅ → 1.4.0, +2559.7 KiB
openjpeg: ∅ → 2.5.2, +1525.1 KiB
zstd: ∅ → 1.5.6, +1158.0 KiB

$ nvd diff $(nix build nixpkgs#ffmpeg-headless^bin --print-out-paths --no-link) $(nix build .#ffmpeg-headless^bin --print-out-paths --no-link)
<<< /nix/store/4n60lnj3zkjpasd4c56bzhpx2m8lc1sx-ffmpeg-headless-6.1.1-bin
>>> /nix/store/884f487w5hac6rs94jq6hq5zqkxdv666-ffmpeg-headless-6.1.1-bin
Added packages:
[A.]  NixOS#1  celt        0.11.3
[A.]  NixOS#2  giflib      5.2.2
[A.]  NixOS#3  lcms2       2.16
[A.]  NixOS#4  lerc        4.0.0
[A.]  NixOS#5  libaom      3.9.0
[A.]  NixOS#6  libdeflate  1.20
[A.]  NixOS#7  libtiff     4.6.0
[A.]  NixOS#8  libvmaf     3.0.0
[A.]  NixOS#9  libwebp     1.4.0 x2
[A.]  NixOS#10  openjpeg    2.5.2
[A.]  NixOS#11  zstd        1.5.6
Closure size: 66 -> 78 (15 paths added, 3 paths removed, delta +12, disk usage +18.5MiB).
```
Ma27 added a commit to Ma27/nixpkgs that referenced this pull request Aug 24, 2024
Strongly inspired by the forgejo counterpart[1], for the following
reasons:

* The feature is broken with the current module and crashes on
  authentication with the following stacktrace (with a PAM service
  `gitea` added):

      server # Stack trace of thread 1008:
      server # #0  0x00007f3116917dfb __nptl_setxid (libc.so.6 + 0x8ddfb)
      server # #1  0x00007f3116980ae6 setuid (libc.so.6 + 0xf6ae6)
      server # #2  0x00007f30cc80f420 _unix_run_helper_binary (pam_unix.so + 0x5420)
      server # #3  0x00007f30cc8108c9 _unix_verify_password (pam_unix.so + 0x68c9)
      server # #4  0x00007f30cc80e1b5 pam_sm_authenticate (pam_unix.so + 0x41b5)
      server # #5  0x00007f3116a84e5b _pam_dispatch (libpam.so.0 + 0x3e5b)
      server # #6  0x00007f3116a846a3 pam_authenticate (libpam.so.0 + 0x36a3)
      server # NixOS#7  0x00000000029b1e7a n/a (.gitea-wrapped + 0x25b1e7a)
      server # NixOS#8  0x000000000047c7e4 n/a (.gitea-wrapped + 0x7c7e4)
      server # ELF object binary architecture: AMD x86-64
      server #
      server # [   42.420827] gitea[897]: pam_unix(gitea:auth): unix_chkpwd abnormal exit: 159
      server # [   42.423142] gitea[897]: pam_unix(gitea:auth): authentication failure; logname= uid=998 euid=998 tty= ruser= rhost=  user=snenskek

  It only worked after turning off multiple sandbox settings and adding
  `shadow` as supplementary group to `gitea.service`.

  I'm not willing to maintain additional multiple sandbox settings for
  different features, especially given that it was probably not used for
  quite a long time:

  * There was no PR or bugreport about sandboxing issues related to
    PAM.

  * Ever since the module exists, it used the user `gitea`, i.e. it had
    never read-access to `/etc/shadow`.

* Upstream has it disabled by default[2].

If somebody really needs it, it can still be brought back by an overlay
updating `tags` accordingly and modifying the systemd service config.

[1] 07641a9
[2] https://docs.gitea.com/usage/authentication#pam-pluggable-authentication-module
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants