Repository navigation
Conversation
Assisted-by: Claude Code Signed-off-by: lazerg <lazerg2@gmail.com>
|
Review requested:
|
|
Caution AgentScan found account activity patterns that may be consistent with automation. This is a heuristic, not proof that this pull request was opened by an agent or violates policy. AI-assisted contributions are permitted, but automated tooling must not open pull requests without advance approval, and contributors must personally understand, test, verify, and take responsibility for every submitted change. See the AgentScan analysis, AI use policy, and automation policy for additional context. |
| NODE_DEFINE_CONSTANT(target, BROTLI_DECODER_ERROR_FORMAT_PADDING_1); | ||
| NODE_DEFINE_CONSTANT(target, BROTLI_DECODER_ERROR_FORMAT_PADDING_2); | ||
| NODE_DEFINE_CONSTANT(target, BROTLI_DECODER_ERROR_FORMAT_DISTANCE); | ||
| #ifndef NODE_SHARED_BROTLI |
There was a problem hiding this comment.
| #ifndef NODE_SHARED_BROTLI | |
| #ifdef BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH |
There was a problem hiding this comment.
I wonder if we need a different check here, since BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH is an enum constant.
| }, { | ||
| 'defines': [ 'NODE_SHARED_BROTLI' ], |
There was a problem hiding this comment.
| }, { | |
| 'defines': [ 'NODE_SHARED_BROTLI' ], |
| if (node_shared_brotli) { | ||
| defines += [ "NODE_SHARED_BROTLI" ] | ||
| } |
There was a problem hiding this comment.
| if (node_shared_brotli) { | |
| defines += [ "NODE_SHARED_BROTLI" ] | |
| } |
| } | ||
|
|
||
| { | ||
| if (!process.config.variables.node_shared_brotli) { |
There was a problem hiding this comment.
| if (!process.config.variables.node_shared_brotli) { | |
| if (zlib.constants.BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH) { |
|
Can you remove the cherry-pick to validate it does fix this build and still pass the tests node/tools/nix/sharedLibDeps.nix Lines 25 to 32 in 697ecce |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #66895 +/- ##
==========================================
- Coverage 90.58% 90.57% -0.01%
==========================================
Files 797 797
Lines 278434 278486 +52
Branches 53531 53526 -5
==========================================
+ Hits 252216 252236 +20
- Misses 16571 16591 +20
- Partials 9647 9659 +12
🚀 New features to boost your workflow:
|
|
Since commit introducing this regression is related to a CVE, I wonder would such workaround breaks the fix? |
|
Brotli 1.2.1 has been released with a backport of the fix for CVE-2026-111497 which added
Yes. If |
Assisted-by: Claude Code Signed-off-by: lazerg <lazerg2@gmail.com>
Assisted-by: Claude Code Signed-off-by: lazerg <lazerg2@gmail.com>
Changelog@@ -120 +119,0 @@
-/nix/store/kminssh6dm17s3f6cqszaxwpyyhm6i88-brotli-1.2.0 (aarch64-darwin)
@@ -122,2 +120,0 @@
-/nix/store/6aaijr2v6rlgailsir2l1q9j3k72flxx-brotli-1.2.0 (aarch64-linux)
-/nix/store/895yl6jdl10mkffq8qrgimy2i7snla3q-brotli-1.2.0 (x86_64-darwin)
@@ -125 +121,0 @@
-/nix/store/2nyhgrln2i4rw0rdijyqh0nn333ws3nx-brotli-1.2.0 (x86_64-linux)
@@ -128,2 +123,0 @@
-/nix/store/c4y22jmyh7wjhbdidbnhz661jpg9kaim-brotli-1.2.0-dev (aarch64-darwin)
-/nix/store/44lj6r7v54yfzcd7p6l6n76g7ma7y633-brotli-1.2.0-dev (aarch64-linux)
@@ -132 +125,0 @@
-/nix/store/af449dhklypcj2kild1fv4q9dy2bmjdv-brotli-1.2.0-dev (x86_64-darwin)
@@ -134 +126,0 @@
-/nix/store/ainnzs18blgfd5f3n21wnq0m4j5ryf6j-brotli-1.2.0-dev (x86_64-linux)
@@ -136 +127,0 @@
-/nix/store/kl3m09q74kf4g4mfk9whw65w8dw0jg3a-brotli-1.2.0-lib (aarch64-darwin)
@@ -138 +128,0 @@
-/nix/store/r5vy3djdp4qpddj4bsw8hqcl9asyp1h2-brotli-1.2.0-lib (aarch64-linux)
@@ -140 +129,0 @@
-/nix/store/yvkvvnyvnaw08bl9gvnkbk33m339v4ff-brotli-1.2.0-lib (x86_64-darwin)
@@ -142 +130,0 @@
-/nix/store/f667bn2vz2vv1hf4ayjc49r3w967ivhr-brotli-1.2.0-lib (x86_64-linux) |
|
@aduh95 ✅ Done I removed the Nix cherry-pick of the brotli patch (c47b864). The shared-libraries CI now builds against unpatched brotli, so it checks the fix by itself. I did not use your Local result: all 90 |
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCHisn't in any brotli release yet (1.2.0 is the latest), so building with--shared-brotlifails since 7ba22c2. It's an enum value and the bundled brotli still reports 1.2.0, so there's nothing to#ifdefon. This only exposes the constant when brotli is bundled and skips the matching test otherwise.I built with
--shared-brotliagainst Homebrew brotli 1.2.0 and ranparallel/test-zlib*(90 tests, all pass). The GN change is untested, I had nognlocally.Fixes: #66894