Changeset 2980344 for postlfs/security

Timestamp:

06/10/2023 11:14:18 AM (12 months ago)

Author:

Pierre Labastie <pierre.labastie@…>

Branches:

12.0, 12.1, kea, ken/TL2024, ken/tuningfonts, lazarus, lxqt, plabs/newcss, python3.11, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/xf86-video-removal

Children:

460609c

Parents:

ddafabd

Message:

nss: prevent illegal instruction on old processors

File:

• postlfs/security/nss.xml (modified) (2 diffs)

postlfs/security/nss.xml

@@ -106 +106 @@
         </para>
       </listitem>
+      <listitem>
+        <para>
+          Required patch for processors lacking the <quote>adx</quote>
+          instruction set:
+          <ulink url="&patch-root;/nss-&nss-version;-illegal_instruction-1.patch"/>
+        </para>
+      </listitem>
     </itemizedlist>
 
@@ -129 +136 @@
     <title>Installation of NSS</title>
 
-    <!-- In 3.53.x, parallel build was possible.
-         And with another rebuild of nss-3.54, all is well again, but
-         broken in 3.60. Fixed again in 3.62. -->
-<!--
     <note>
       <para>
-        This package does not support parallel build.
+        Some old generations processors lack an assembler instruction that
+        is generated unconditionally by NSS-3.90. It leads to an
+        "illegal instruction" fault when running firefox. The availability
+        of this instruction is asserted by the <quote>adx</quote> flag
+        in <filename>/proc/cpuinfo</filename>. If this flag is not set,
+        apply the following patch:
       </para>
     </note>
--->
+
+<screen><userinput>grep -q adx /proc/cpuinfo || \
+patch -Np1 -i ../nss-&nss-version;-illegal_instruction-1.patch</userinput></screen>
 
     <para>