Skip to content

packaging: Fix more fork unsafety in aws-c-io s2n patch - #16514

Merged
xokdvium merged 1 commit into
masterfrom
fix-aws-c-io-patches
Sep 24, 2026
Merged

xokdvium merged 1 commit into
masterfrom
fix-aws-c-io-patches

Conversation

@xokdvium

Copy link
Copy Markdown
Contributor

Motivation

The are several oopsies I made when rebasing those patches. One is that AWS_USE_SECITEM must not be defined at all. Second one is apparently there's even more fork unsafety...

Can't wait to get rid of fork() without exec so that this cursedness is not needed.
That should be quite easy to do with #16504.

Context


Add 👍 to pull requests you find important.

The Nix maintainer team uses a GitHub project board to schedule and track reviews.

The are several oopsies I made when rebasing those patches.
One is that AWS_USE_SECITEM must not be defined at all.
Second one is apparently there's even more fork unsafety...

Can't wait to get rid of fork() without exec so that this cursedness is
not needed.
@xokdvium

Copy link
Copy Markdown
Contributor Author

Let's wait for @Mic92 as the author of original patch. I rushed the first time to get the nixpkgs bumped, but now I'm eyeing bumping nixpkgs on the maintenance branch so it better be correct.

@Mic92

Mic92 commented Sep 24, 2026

Copy link
Copy Markdown
Member

I actually dropped the patch because unstable had now and upstream version doing this by default, if I remember correctly. So maybe bumping could be easier?

@Mic92

Mic92 commented Sep 24, 2026

Copy link
Copy Markdown
Member

Mic92@314f0c2

@xokdvium

Copy link
Copy Markdown
Contributor Author

@mix92 I was able to reproduce issue even with the new version on my Mac. I can post backtraces here.

@Mic92

Mic92 commented Sep 24, 2026

Copy link
Copy Markdown
Member

Nevermind than, I just noticed during rebase than s2n was linked and didn't checked closely.

@Mic92

Mic92 commented Sep 24, 2026

Copy link
Copy Markdown
Member

If this has urgency please just go ahead. I won't have time to look into it more closely because of nixcon.

@xokdvium

Copy link
Copy Markdown
Contributor Author

Ugh for the lack of a better option, let's go with this for now. At least it no longer crashed... Though I must say I don't feel comfortable patching such core code without fully understanding all the consequences.

I'll try to get rid of fork-without-exec ASAP.

@xokdvium
xokdvium added this pull request to the merge queue Sep 24, 2026
Merged via the queue into master with commit 3fd06f0 Sep 24, 2026
20 checks passed
@xokdvium
xokdvium deleted the fix-aws-c-io-patches branch September 24, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants