Commit Graph

188462 Commits

Author SHA1 Message Date
Ruud van Asseldonk
fdd78a5387 libressl: use CFLAGS to avoid exectuable stack
It turns out that libcrypto had an exectuable stack, because it linked
some objects without a .note.GNU-stack section. Compilers add this
section by default, but the objects produced from .S files did not
contain it. The .S files do include a directive to add the section, but
guarded behind an #ifdef HAVE_GNU_STACK. So define HAVE_GNU_STACK, to
ensure that all objects have a .note.GNU-stack section.
2019-08-21 00:16:08 +02:00
Ruud van Asseldonk
c02b4a1cc8 libressl: do not set noexecstack on Darwin at all
It is not needed on Darwin. [1] Thanks Matthew for explaining this.

[1]: https://github.com/NixOS/nixpkgs/pull/66454#issuecomment-520970986
2019-08-13 22:20:16 +02:00
Ruud van Asseldonk
b3c613b9aa libressl: fix noexecstack on Darwin
The flags to disable executable stacks are different for Clang and GCC,
and Clang is used on Darwin.
2019-08-11 20:34:57 +02:00
Ruud van Asseldonk
8b6a9202e7 libressl: build libcrypto with noexecstack
For some reasons, libcrypto would be built with the executable stack
flag set. I found out about this when Nginx failed to load the shared
library, because I was running it with MemoryDenyWriteExecute=true,
which does not permit executable stacks.

I am not sure why the stack ends up executable; the other shared
libraries which are part of LibreSSL do not have this flag set. You can
verify this with 'execstack -q'. Non-executable stacks should be the
default, and from checking some other files, that does appear to be the
case. The LibreSSL sources do not contain the string "execstack", so
I am not sure what causes the default to be overridden.

Adding '-z noexecstack' to the linker flags makes the linker unset the
flag. Now my Nginx can load the library, and so far I have not run into
other issues.
2019-08-10 22:21:57 +02:00
Marek Mahut
809b38a784
Merge pull request #62467 from r-ryantm/auto-update/librealsense
librealsense: 2.21.0 -> 2.22.0
2019-08-10 19:30:02 +02:00
Marek Mahut
2cc3a789c3
Merge pull request #62418 from r-ryantm/auto-update/glbinding
glbinding: 3.0.2 -> 3.1.0
2019-08-10 19:29:20 +02:00
Marek Mahut
64ebc0bf80
Merge pull request #62348 from r-ryantm/auto-update/argyllcms
argyllcms: 2.1.0 -> 2.1.1
2019-08-10 19:28:56 +02:00
Silvan Mosberger
cf2a158730
nixos/beegfs: mark as broken (#66352)
nixos/beegfs: mark as broken
2019-08-10 18:59:51 +02:00
Daniel Schaefer
e1a5484098 pptp: Fix shebangs
- Remove `which` as build-time input
- Use substituteInPlace instead of sed (warns if it fails to replace)
- Use perl in buildInputs as it's a run-time dependency
- Patch shebangs manually, not sure why fixupPhase doesn't do it
2019-08-11 01:53:08 +09:00
worldofpeace
4a3aa14c32
Merge pull request #60796 from r-ryantm/auto-update/standardnotes
standardnotes: 3.0.6 -> 3.0.15
2019-08-10 12:01:05 -04:00
R. RyanTM
55af862a76 standardnotes: 3.0.6 -> 3.0.15 2019-08-10 11:57:58 -04:00
worldofpeace
2eaef474f2
Merge pull request #66236 from worldofpeace/test-reorganize
Reorganize GNOME tests, re-enable LightDM for release-combined
2019-08-10 11:23:57 -04:00
worldofpeace
1ce7ece4b2
Merge pull request #66398 from worldofpeace/gnome3-option-renames
Move certain GNOME3 options to programs
2019-08-10 11:17:47 -04:00
worldofpeace
0722e88665 nixos/gpaste: don't set sessionPath
Not needed since f63d94eba3
2019-08-10 11:17:18 -04:00
worldofpeace
be3fe4a869 nixos/gpaste: move to programs 2019-08-10 11:17:18 -04:00
Mario Rodas
1c7cf9493c
Merge pull request #52588 from marsam/init-fffuu
fffuu: init at unstable-2018-05-26
2019-08-10 09:52:31 -05:00
Vincent Laporte
a4d6a3f724 ocamlPackages.pgocaml: 2.3 -> 3.2 2019-08-10 14:19:18 +00:00
Marek Mahut
bdeae5c1ca
Merge pull request #62515 from r-ryantm/auto-update/python3.7-azure-mgmt-resource
python37Packages.azure-mgmt-resource: 2.1.0 -> 2.2.0
2019-08-10 15:57:06 +02:00
Marek Mahut
236caec56d
Merge pull request #62377 from r-ryantm/auto-update/cli11
cli11: 1.7.1 -> 1.8.0
2019-08-10 15:54:58 +02:00
Marek Mahut
51ff2494db librealsense: 2.22.0 -> 2.23.0 2019-08-10 15:42:29 +02:00
Tim Steinbach
2da00ae7b4
linux: 5.2.7 -> 5.2.8 2019-08-10 09:28:28 -04:00
Tim Steinbach
c0dbb5cf22
linux: 4.19.65 -> 4.19.66 2019-08-10 09:28:28 -04:00
Tim Steinbach
933caf635a
linux: 4.14.137 -> 4.14.138 2019-08-10 09:28:25 -04:00
Aaron Andersen
9267328b09
Merge pull request #66169 from r-ryantm/auto-update/subversion-client
subversionClient: 1.12.0 -> 1.12.2
2019-08-10 09:09:38 -04:00
Vladimír Čunát
387e6952d3
Merge #65846: Update php packages 2019-08-10 14:42:37 +02:00
Vladimír Čunát
6c177c3eba
Merge #65668: wavpack: CVE-2019-1010317 CVE-2019-1010319 2019-08-10 14:37:54 +02:00
Domen Kožar
5ce8864c54
Merge pull request #66328 from domenkozar/nixos-options-doc
Extract NixOS options documentation generation to a function
2019-08-10 14:07:19 +02:00
worldofpeace
63f0c69318
Merge pull request #66322 from lightbulbjim/rapid-photo-downloader-wrapping
rapid-photo-downloader: fix QT wrapping
2019-08-10 08:00:41 -04:00
Chris Rendle-Short
2f1b92ddf8 rapid-photo-downloader: fix QT wrapping
See #65399
2019-08-10 07:59:48 -04:00
Andreas Rammhold
d404bcd1d9
Merge pull request #66393 from ivan/chromium-76.0.3809.100
chromium: 76.0.3809.87 -> 76.0.3809.100
2019-08-10 11:54:10 +00:00
Timo Kaufmann
3541df594e
Merge pull request #66396 from timokau/sage-undo-short
sage: default to long tests again
2019-08-10 13:16:00 +02:00
Michael Weiss
7680b512cb
tdesktop: 1.7.14 -> 1.8.0 2019-08-10 13:01:23 +02:00
Michael Weiss
8ade595b94
androidStudioPackages.beta: 3.5.0.19 -> 3.5.0.20 2019-08-10 12:31:05 +02:00
Mario Rodas
a460545927
fffuu: init at unstable-2018-05-26 2019-08-10 05:20:03 -05:00
Mario Rodas
28360dd3b7
Merge pull request #66413 from marsam/update-flow
flow: 0.104.0 -> 0.105.0
2019-08-10 05:12:37 -05:00
Mario Rodas
5b874f2399
Merge pull request #65967 from r-ryantm/auto-update/liblastfm
liblastfm: 1.0.9 -> 1.1.0
2019-08-10 05:09:15 -05:00
Mario Rodas
65b29b4ec3
Merge pull request #65988 from r-ryantm/auto-update/lxc
lxc: 3.1.0 -> 3.2.1
2019-08-10 05:04:52 -05:00
Mario Rodas
a407b31bdb
Merge pull request #65974 from r-ryantm/auto-update/lxcfs
lxcfs: 3.0.4 -> 3.1.2
2019-08-10 05:03:20 -05:00
Mario Rodas
97cd74fe0f
Merge pull request #65969 from r-ryantm/auto-update/liblcf
liblcf: 0.6.0 -> 0.6.1
2019-08-10 05:00:54 -05:00
markuskowa
732c1671f5
Merge pull request #66380 from markuskowa/upd-rdma
rdma-core: 24.0 -> 25.0
2019-08-10 11:55:17 +02:00
adisbladis
496ae0a1d4
Merge pull request #66360 from rasendubi/emacs-packages-2019-08-09
Emacs packages update: 2019-08-09
2019-08-10 11:54:21 +02:00
Marek Mahut
5c5ce4cc80
Merge pull request #64781 from r-ryantm/auto-update/clickhouse
clickhouse: 19.6.2.11 -> 19.9.2.4
2019-08-10 11:47:33 +02:00
Mario Rodas
bec68e12bf
Merge pull request #66056 from r-ryantm/auto-update/pngpp
pngpp: 0.2.9 -> 0.2.10
2019-08-10 04:45:29 -05:00
Mario Rodas
ce9dadd7d1
Merge pull request #65996 from r-ryantm/auto-update/neo4j
neo4j: 3.5.6 -> 3.5.8
2019-08-10 04:43:05 -05:00
Mario Rodas
49af547aaf
Merge pull request #66000 from r-ryantm/auto-update/now-cli
now-cli: 15.5.0 -> 15.8.7
2019-08-10 04:39:25 -05:00
Mario Rodas
c0b70db506
Merge pull request #66043 from r-ryantm/auto-update/python3.7-django-polymorphic
python37Packages.django_polymorphic: 2.0.3 -> 2.1.2
2019-08-10 04:33:23 -05:00
Mario Rodas
ce82fcbff9
Merge pull request #66031 from r-ryantm/auto-update/pony-stable
pony-stable: 0.2.0 -> 0.2.1
2019-08-10 04:32:22 -05:00
Domen Kožar
59846b9265
Merge pull request #66364 from avh4/elm-format-0.8.2
elm-format: 0.8.1 -> 0.8.2
2019-08-10 11:02:33 +02:00
Marek Mahut
2aa7589303
Merge pull request #41701 from r-ryantm/auto-update/gperftools
gperftools: 2.6.3 -> 2.7
2019-08-10 10:27:15 +02:00
Marek Mahut
8effb0a4fb
Merge pull request #65126 from r-ryantm/auto-update/powershell
powershell: 6.2.1 -> 6.2.2
2019-08-10 10:03:53 +02:00