lol, still buggy

[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34c30a800 state=DECODING_METADATA Decode metadata failed, shutting down decoder: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:366
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34c30a800 Decode error: NS_ERROR_DOM_MEDIA_METADATA_ERR (0x806e0006) - static MP4Metadata::ResultAndByteBuffer mozilla::MP4Metadata::Metadata(mozilla::ByteStream *): Cannot parse metadata: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:3562
Fontconfig warning: "/nix/store/kaacqypcv9mnqnd069ksqplxwkwmpfyn-tor-browser-bundle-bin-11.5.1/share/tor-browser/TorBrowser/Data/fontconfig/fonts.conf", line 85: unknown element "blank"
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34e63cc00 state=DECODING_METADATA Decode metadata failed, shutting down decoder: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:366
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34e63cc00 Decode error: NS_ERROR_DOM_MEDIA_METADATA_ERR (0x806e0006) - static MP4Metadata::ResultAndByteBuffer mozilla::MP4Metadata::Metadata(mozilla::ByteStream *): Cannot parse metadata: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:3562
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34dff7000 state=DECODING_METADATA Decode metadata failed, shutting down decoder: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:366
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34dff7000 Decode error: NS_ERROR_DOM_MEDIA_METADATA_ERR (0x806e0006) - static MP4Metadata::ResultAndByteBuffer mozilla::MP4Metadata::Metadata(mozilla::ByteStream *): Cannot parse metadata: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:3562
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34dff1400 state=DECODING_METADATA Decode metadata failed, shutting down decoder: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:366
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34dff1400 Decode error: NS_ERROR_DOM_MEDIA_METADATA_ERR (0x806e0006) - static MP4Metadata::ResultAndByteBuffer mozilla::MP4Metadata::Metadata(mozilla::ByteStream *): Cannot parse metadata: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:3562
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34b784c00 state=DECODING_METADATA Decode metadata failed, shutting down decoder: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:366
[Child 54302, MediaDecoderStateMachine #1] WARNING: Decoder=7fe34b784c00 Decode error: NS_ERROR_DOM_MEDIA_METADATA_ERR (0x806e0006) - static MP4Metadata::ResultAndByteBuffer mozilla::MP4Metadata::Metadata(mozilla::ByteStream *): Cannot parse metadata: file /var/tmp/build/firefox-4332e5e8469f/dom/media/MediaDecoderStateMachine.cpp:3562

(/nix/store/kaacqypcv9mnqnd069ksqplxwkwmpfyn-tor-browser-bundle-bin-11.5.1/share/tor-browser/firefox:60930): GLib-WARNING **: 03:28:28.065: getpwuid_r(): failed due to: Permission denied.
Fontconfig warning: "/nix/store/kaacqypcv9mnqnd069ksqplxwkwmpfyn-tor-browser-bundle-bin-11.5.1/share/tor-browser/TorBrowser/Data/fontconfig/fonts.conf", line 85: unknown element "blank"

tor-browser-bundle-bin 11.5.1, don't depend on it, ie run in a container etc.

In reply to @sandro:supersandro.de
minimal requirements for the go bump: https://github.com/NixOS/nixpkgs/pull/176661 https://github.com/NixOS/nixpkgs/pull/179622 I don't know if darwin requires some extra commits for the apple sdk 11.0 to properly compile but I would assume yes. Also we need to update/patch/fix probably an unknown number of golang.org/x/sys dependencies otherwise aarch64-darwin will break for some packages. I would assume the number is between 30 and 50 but I don't know.

In reply to @winterqt:nixos.dev
(Is there a reason you say it's just aarch64? I could be wrong.)

can someone look into updating botan2, please?

diff --git a/pkgs/development/libraries/botan/2.0.nix b/pkgs/development/libraries/botan/2.0.nix
index 113c4a27b91..6987b6c35f0 100644
--- a/pkgs/development/libraries/botan/2.0.nix
+++ b/pkgs/development/libraries/botan/2.0.nix
@@ -1,19 +1,10 @@
 { callPackage, fetchpatch, ... } @ args:
 
 callPackage ./generic.nix (args // {
-  baseVersion = "2.18";
-  revision = "1";
-  sha256 = "0adf53drhk1hlpfih0175c9081bqpclw6p2afn51cmx849ib9izq";
+  baseVersion = "2.19";
+  revision = "2";
+  sha256 = "sha256-OvXxdhXGtc2Lgy0mn7bLTVTsZPnrCd2/Gt1Qk5QbTXU=";
   postPatch = ''
     sed -e 's@lang_flags "@&--std=c++11 @' -i src/build-data/cc/{gcc,clang}.txt
   '';
-  extraPatches = [
-    (fetchpatch {
-      name = "CVE-2021-40529.patch";
-      url = "https://github.com/randombit/botan/commit/9a23e4e3bc3966340531f2ff608fa9d33b5185a2.patch";
-      sha256 = "1ax1n2l9zh0hk35vkkywgkhzpdk76xb9apz2wm3h9kjvjs9acr3y";
-      # our source tarball doesn't include the tests
-      excludes = [ "src/tests/*" ];
-    })
-  ];
 })

botan> patching sources
botan> configuring
botan>    INFO: configure.py invoked with options "--prefix=/nix/store/n3d9lywg3c2fc97prz53rwrg7i7ccmz5-botan-2.19.2 --with-bzip2 --with-zlib --with-openssl"
botan>    INFO: Configuring to build Botan 2.19.2 (revision git:a85eaffe863a401ba312be5e1403bca80e70221e)
botan>    INFO: Running under 3.10.6 (main, Aug  1 2022, 20:38:21) [GCC 11.3.0]
botan>    INFO: Implicit --ar-command=ar due to environment variable AR
botan>    INFO: Implicit --cc-bin=g++ due to environment variable CXX
botan>    INFO: Autodetected platform information: OS="Linux" machine="x86_64" proc=""
botan>    INFO: Guessing target OS is linux (use --os to set)
botan>    INFO: Guessing target processor is a x86_64 (use --cpu to set)
botan>    INFO: Auto-detected compiler version 11.3
botan>    INFO: Auto-detected compiler arch x86_64
botan>    INFO: Target is gcc:11.3-linux-x86_64
botan>    INFO: Assuming target x86_64 is little endian
botan>   ERROR: Module not found: openssl
botan> builder for '/nix/store/617qi0bb7r7kmh50qxhb3b0w2z8nsk6a-botan-2.19.2.drv' failed with exit code 1

third_party = ['boost', 'bzip2', 'lzma', 'commoncrypto', 'sqlite3', 'zlib', 'tpm']

So the zlib issue is perplexing me:

On Darwin, I can't get the test that fails to to fail at all, while on Linux I can only get it to segfault in the build sandbox -- it fails without segfaulting otherwise.

😅 not sure what to think of this

In reply to @rick:matrix.ciphernetics.nl
Probably the behaviour of curl is different when sandboxed (the way nix does it on linux)