Ruud van Asseldonk
fdd78a5387
libressl: use CFLAGS to avoid exectuable stack
...
It turns out that libcrypto had an exectuable stack, because it linked
some objects without a .note.GNU-stack section. Compilers add this
section by default, but the objects produced from .S files did not
contain it. The .S files do include a directive to add the section, but
guarded behind an #ifdef HAVE_GNU_STACK. So define HAVE_GNU_STACK, to
ensure that all objects have a .note.GNU-stack section.
2019-08-21 00:16:08 +02:00
Ruud van Asseldonk
c02b4a1cc8
libressl: do not set noexecstack on Darwin at all
...
It is not needed on Darwin. [1] Thanks Matthew for explaining this.
[1]: https://github.com/NixOS/nixpkgs/pull/66454#issuecomment-520970986
2019-08-13 22:20:16 +02:00
Ruud van Asseldonk
b3c613b9aa
libressl: fix noexecstack on Darwin
...
The flags to disable executable stacks are different for Clang and GCC,
and Clang is used on Darwin.
2019-08-11 20:34:57 +02:00
Ruud van Asseldonk
8b6a9202e7
libressl: build libcrypto with noexecstack
...
For some reasons, libcrypto would be built with the executable stack
flag set. I found out about this when Nginx failed to load the shared
library, because I was running it with MemoryDenyWriteExecute=true,
which does not permit executable stacks.
I am not sure why the stack ends up executable; the other shared
libraries which are part of LibreSSL do not have this flag set. You can
verify this with 'execstack -q'. Non-executable stacks should be the
default, and from checking some other files, that does appear to be the
case. The LibreSSL sources do not contain the string "execstack", so
I am not sure what causes the default to be overridden.
Adding '-z noexecstack' to the linker flags makes the linker unset the
flag. Now my Nginx can load the library, and so far I have not run into
other issues.
2019-08-10 22:21:57 +02:00
Marek Mahut
809b38a784
Merge pull request #62467 from r-ryantm/auto-update/librealsense
...
librealsense: 2.21.0 -> 2.22.0
2019-08-10 19:30:02 +02:00
Marek Mahut
2cc3a789c3
Merge pull request #62418 from r-ryantm/auto-update/glbinding
...
glbinding: 3.0.2 -> 3.1.0
2019-08-10 19:29:20 +02:00
Marek Mahut
64ebc0bf80
Merge pull request #62348 from r-ryantm/auto-update/argyllcms
...
argyllcms: 2.1.0 -> 2.1.1
2019-08-10 19:28:56 +02:00
Silvan Mosberger
cf2a158730
nixos/beegfs: mark as broken ( #66352 )
...
nixos/beegfs: mark as broken
2019-08-10 18:59:51 +02:00
Daniel Schaefer
e1a5484098
pptp: Fix shebangs
...
- Remove `which` as build-time input
- Use substituteInPlace instead of sed (warns if it fails to replace)
- Use perl in buildInputs as it's a run-time dependency
- Patch shebangs manually, not sure why fixupPhase doesn't do it
2019-08-11 01:53:08 +09:00
worldofpeace
4a3aa14c32
Merge pull request #60796 from r-ryantm/auto-update/standardnotes
...
standardnotes: 3.0.6 -> 3.0.15
2019-08-10 12:01:05 -04:00
R. RyanTM
55af862a76
standardnotes: 3.0.6 -> 3.0.15
2019-08-10 11:57:58 -04:00
worldofpeace
2eaef474f2
Merge pull request #66236 from worldofpeace/test-reorganize
...
Reorganize GNOME tests, re-enable LightDM for release-combined
2019-08-10 11:23:57 -04:00
worldofpeace
1ce7ece4b2
Merge pull request #66398 from worldofpeace/gnome3-option-renames
...
Move certain GNOME3 options to programs
2019-08-10 11:17:47 -04:00
worldofpeace
0722e88665
nixos/gpaste: don't set sessionPath
...
Not needed since f63d94eba3
2019-08-10 11:17:18 -04:00
worldofpeace
be3fe4a869
nixos/gpaste: move to programs
2019-08-10 11:17:18 -04:00
Mario Rodas
1c7cf9493c
Merge pull request #52588 from marsam/init-fffuu
...
fffuu: init at unstable-2018-05-26
2019-08-10 09:52:31 -05:00
Vincent Laporte
a4d6a3f724
ocamlPackages.pgocaml: 2.3 -> 3.2
2019-08-10 14:19:18 +00:00
Marek Mahut
bdeae5c1ca
Merge pull request #62515 from r-ryantm/auto-update/python3.7-azure-mgmt-resource
...
python37Packages.azure-mgmt-resource: 2.1.0 -> 2.2.0
2019-08-10 15:57:06 +02:00
Marek Mahut
236caec56d
Merge pull request #62377 from r-ryantm/auto-update/cli11
...
cli11: 1.7.1 -> 1.8.0
2019-08-10 15:54:58 +02:00
Marek Mahut
51ff2494db
librealsense: 2.22.0 -> 2.23.0
2019-08-10 15:42:29 +02:00
Tim Steinbach
2da00ae7b4
linux: 5.2.7 -> 5.2.8
2019-08-10 09:28:28 -04:00
Tim Steinbach
c0dbb5cf22
linux: 4.19.65 -> 4.19.66
2019-08-10 09:28:28 -04:00
Tim Steinbach
933caf635a
linux: 4.14.137 -> 4.14.138
2019-08-10 09:28:25 -04:00
Aaron Andersen
9267328b09
Merge pull request #66169 from r-ryantm/auto-update/subversion-client
...
subversionClient: 1.12.0 -> 1.12.2
2019-08-10 09:09:38 -04:00
Vladimír Čunát
387e6952d3
Merge #65846 : Update php packages
2019-08-10 14:42:37 +02:00
Vladimír Čunát
6c177c3eba
Merge #65668 : wavpack: CVE-2019-1010317 CVE-2019-1010319
2019-08-10 14:37:54 +02:00
Domen Kožar
5ce8864c54
Merge pull request #66328 from domenkozar/nixos-options-doc
...
Extract NixOS options documentation generation to a function
2019-08-10 14:07:19 +02:00
worldofpeace
63f0c69318
Merge pull request #66322 from lightbulbjim/rapid-photo-downloader-wrapping
...
rapid-photo-downloader: fix QT wrapping
2019-08-10 08:00:41 -04:00
Chris Rendle-Short
2f1b92ddf8
rapid-photo-downloader: fix QT wrapping
...
See #65399
2019-08-10 07:59:48 -04:00
Andreas Rammhold
d404bcd1d9
Merge pull request #66393 from ivan/chromium-76.0.3809.100
...
chromium: 76.0.3809.87 -> 76.0.3809.100
2019-08-10 11:54:10 +00:00
Timo Kaufmann
3541df594e
Merge pull request #66396 from timokau/sage-undo-short
...
sage: default to long tests again
2019-08-10 13:16:00 +02:00
Michael Weiss
7680b512cb
tdesktop: 1.7.14 -> 1.8.0
2019-08-10 13:01:23 +02:00
Michael Weiss
8ade595b94
androidStudioPackages.beta: 3.5.0.19 -> 3.5.0.20
2019-08-10 12:31:05 +02:00
Mario Rodas
a460545927
fffuu: init at unstable-2018-05-26
2019-08-10 05:20:03 -05:00
Mario Rodas
28360dd3b7
Merge pull request #66413 from marsam/update-flow
...
flow: 0.104.0 -> 0.105.0
2019-08-10 05:12:37 -05:00
Mario Rodas
5b874f2399
Merge pull request #65967 from r-ryantm/auto-update/liblastfm
...
liblastfm: 1.0.9 -> 1.1.0
2019-08-10 05:09:15 -05:00
Mario Rodas
65b29b4ec3
Merge pull request #65988 from r-ryantm/auto-update/lxc
...
lxc: 3.1.0 -> 3.2.1
2019-08-10 05:04:52 -05:00
Mario Rodas
a407b31bdb
Merge pull request #65974 from r-ryantm/auto-update/lxcfs
...
lxcfs: 3.0.4 -> 3.1.2
2019-08-10 05:03:20 -05:00
Mario Rodas
97cd74fe0f
Merge pull request #65969 from r-ryantm/auto-update/liblcf
...
liblcf: 0.6.0 -> 0.6.1
2019-08-10 05:00:54 -05:00
markuskowa
732c1671f5
Merge pull request #66380 from markuskowa/upd-rdma
...
rdma-core: 24.0 -> 25.0
2019-08-10 11:55:17 +02:00
adisbladis
496ae0a1d4
Merge pull request #66360 from rasendubi/emacs-packages-2019-08-09
...
Emacs packages update: 2019-08-09
2019-08-10 11:54:21 +02:00
Marek Mahut
5c5ce4cc80
Merge pull request #64781 from r-ryantm/auto-update/clickhouse
...
clickhouse: 19.6.2.11 -> 19.9.2.4
2019-08-10 11:47:33 +02:00
Mario Rodas
bec68e12bf
Merge pull request #66056 from r-ryantm/auto-update/pngpp
...
pngpp: 0.2.9 -> 0.2.10
2019-08-10 04:45:29 -05:00
Mario Rodas
ce9dadd7d1
Merge pull request #65996 from r-ryantm/auto-update/neo4j
...
neo4j: 3.5.6 -> 3.5.8
2019-08-10 04:43:05 -05:00
Mario Rodas
49af547aaf
Merge pull request #66000 from r-ryantm/auto-update/now-cli
...
now-cli: 15.5.0 -> 15.8.7
2019-08-10 04:39:25 -05:00
Mario Rodas
c0b70db506
Merge pull request #66043 from r-ryantm/auto-update/python3.7-django-polymorphic
...
python37Packages.django_polymorphic: 2.0.3 -> 2.1.2
2019-08-10 04:33:23 -05:00
Mario Rodas
ce82fcbff9
Merge pull request #66031 from r-ryantm/auto-update/pony-stable
...
pony-stable: 0.2.0 -> 0.2.1
2019-08-10 04:32:22 -05:00
Domen Kožar
59846b9265
Merge pull request #66364 from avh4/elm-format-0.8.2
...
elm-format: 0.8.1 -> 0.8.2
2019-08-10 11:02:33 +02:00
Marek Mahut
2aa7589303
Merge pull request #41701 from r-ryantm/auto-update/gperftools
...
gperftools: 2.6.3 -> 2.7
2019-08-10 10:27:15 +02:00
Marek Mahut
8effb0a4fb
Merge pull request #65126 from r-ryantm/auto-update/powershell
...
powershell: 6.2.1 -> 6.2.2
2019-08-10 10:03:53 +02:00