Commit Graph

31 Commits

Author SHA1 Message Date
Thomas Gerbet
6dc3ef5e1a php8*: disable PCRE2 JIT SEAlloc to avoid crashes
Using PHP with PCRE2 built with the JIT SEAlloc is known to be
problematic [0] and it may crashes apps using pcntl to process a
workload in parallel like Psalm or PHPCS.

Another solution would be to disable `pcre.jit` but this is likely to
have a noticeable performance impact.

PCRE2 JIT SEAlloc was enabled in order to make possible to use
`MemoryDenyWriteExecute=true` in the NixOS Gitea module [1]. Doing
something similar for a PHP module is likely to involve more steps as
you will also need to disable PHP's JIT. Not building PCRE2 with the JIT
SEAlloc is however not really blocking for someone wanting to build an
hardened PHP module as they likely will disable `pcre.jit` and make sure
`opcache.jit` is disabled.

It should also be noted that OpenSUSE did try to enable PCRE2 JIT
SEAlloc by default in the past but recently reverted the change [2].

[0] https://bugs.php.net/bug.php?id=78630
[1] c990bd6007
[2] https://bugzilla.opensuse.org/show_bug.cgi?id=1182864
2022-08-14 08:46:18 +02:00
Sandro Jäckel
365831bb44
pcre2: fix gitea websearch crashing when searching for a plain string
The nixos gitea module sets MemoryDenyWriteExecute=true which requires
pcre2 to be compiled with --enable-jit-sealloc otherwise it fails with
"-48".

See https://github.com/go-gitea/gitea/issues/10840 and 920838a6a4
2022-06-28 15:13:30 +02:00
Armeen Mahdian
24aedd7fb9 pcre2: 10.39 -> 10.40 2022-04-26 16:59:59 -05:00
Sergei Trofimovich
ae34f37142 pcre, pcre2: autodetect jit support, don't force-enable
PCRE JIT is not supported on most architectores: m68k, s390,
ia64 to name a few.

Example build failure is:

    $ nix build -f. pkgsCross.s390.pcre
    ...
    pcre_jit_compile.c:65:2: error: #error Unsupported architecture

The change shifts from --enable-jit[=yes] to --enable-jit=auto which
allows nixpkgs to enable jit automatically only on supported targets.
2022-04-13 18:07:16 +01:00
embr
95edf58e15 pcre2: 10.37 -> 10.39 2022-01-20 15:19:04 +01:00
Arthur Gautier
2644b4df66
pcre2: ftp.pcre.org looks defunct (#145546)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-11-11 22:21:16 +01:00
AndersonTorres
04b176df00 pcre2: 10.36 -> 10.37 2021-09-20 15:16:44 -03:00
Andrew Childs
48a1e1cb22 pcre2: disable jit on Apple Silicon 2021-05-17 00:27:00 +09:00
Ben Siraphob
66e44425c6 pkgs/development/libraries: stdenv.lib -> lib 2021-01-21 19:11:02 -08:00
R. RyanTM
b46c670ed9 pcre2: 10.35 -> 10.36 2020-12-08 05:27:59 +01:00
Daniel Schaefer
33e86dd228 pcre2: Disable JIT on RISC-V
JIT isn't yet supported on RISC-V. JIT was disabled for pcre on RISC-V
in 158cf6449c
2020-08-13 13:10:02 +02:00
R. RyanTM
55258867b9 pcre2: 10.34 -> 10.35 2020-06-04 18:21:17 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
R. RyanTM
ec7f139ad8 pcre2: 10.33 -> 10.34 2019-11-30 09:05:41 +01:00
volth
46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
R. RyanTM
dafc45800a pcre2: 10.32 -> 10.33
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/pcre2/versions
2019-05-04 17:53:34 +02:00
R. RyanTM
81ccf54c18 pcre2: 10.31 -> 10.32
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/pcre2/versions
2018-11-18 18:25:35 -08:00
Benjamin Hipple
4e65df60d9 pcre2: fetch src from HTTPS instead of FTP
Same change as in https://github.com/NixOS/nixpkgs/pull/44828, for the same reasons.
2018-08-23 14:52:37 +00:00
Jan Malakhovski
1781c007c5 pcre2: disable tests 2018-08-11 09:35:35 +00:00
volth
52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
volth
4bd4e3ef5c pcre2: 10.23 -> 10.31 (#43168) 2018-07-08 10:48:52 +00:00
Jan Malakhovski
7438083a4d tree-wide: disable doCheck and doInstallCheck where it fails (the trivial part) 2018-04-25 04:18:46 +00:00
John Ericson
9bd437d4b4 fetchpatch: Add support for an arbitrary extra prefix
We still ensure the old and new ones start, respectfully, with `a/` and
`b/`. Use with `stripLen` to ensure tha the old `a/` and `/b` are gone
if a new prefix is added.
2018-01-18 12:19:49 -05:00
adisbladis
93294fc5c8
pcre2: Patch for CVE-2017-8786 2017-11-28 12:47:37 +08:00
Silvan Mosberger
f5fa5fa4d6 pkgs: refactor needless quoting of homepage meta attribute (#27809)
* pkgs: refactor needless quoting of homepage meta attribute

A lot of packages are needlessly quoting the homepage meta attribute
(about 1400, 22%), this commit refactors all of those instances.

* pkgs: Fixing some links that were wrongfully unquoted in the previous
commit

* Fixed some instances
2017-08-01 22:03:30 +02:00
Robin Gloster
955b79f462
pcre2: 10.22 -> 10.23 + security fix
CVE-2017-7186

refs nixos/security#57 #24319
2017-03-26 17:13:38 +02:00
Ram Kromberg
46046850e6 pcre2: 10.21 -> 10.22 2016-09-14 21:35:37 +03:00
Guillaume Maudoux
830b58f562 pcre2: 10.20 -> 10.21 2016-05-24 16:22:43 +02:00
Thomas Tuegel
840f4b0b55 pcre2: enable alternate character widths 2015-10-10 13:56:34 -05:00
Thomas Tuegel
d2a855b606 pcre2: enable JIT 2015-10-10 13:56:24 -05:00
Thomas Tuegel
7061b6819a pcre2: init at 10.20 2015-10-09 19:08:25 -05:00