From 2c9c1c82efe822bf5b15512bb1cb1b0b3a9fd8e1 Mon Sep 17 00:00:00 2001 From: Ruud van Asseldonk Date: Thu, 25 Jun 2026 21:19:36 +0200 Subject: [PATCH] libressl: fix static build I broke the static build when I introduced the check that guards against executable stack. It iterates the .so files in the build output, but for a static build, there are none, so the glob fails. Fix this by skipping the check for static builds. --- pkgs/by-name/li/libressl/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/li/libressl/default.nix b/pkgs/by-name/li/libressl/default.nix index 4bf139efc381..7d00a05424d7 100644 --- a/pkgs/by-name/li/libressl/default.nix +++ b/pkgs/by-name/li/libressl/default.nix @@ -64,7 +64,7 @@ let export PREVIOUS_${ldLibPathEnvName}=$${ldLibPathEnvName} export ${ldLibPathEnvName}="$${ldLibPathEnvName}:$(realpath tls/):$(realpath ssl/):$(realpath crypto/)" '' - + lib.optionalString stdenv.hostPlatform.isElf '' + + lib.optionalString (stdenv.hostPlatform.isElf && buildShared) '' # Bail if any shared object has executable stack enabled. This can # happen when an object produced from an assmbly file in libcrypto is # missing a .note.GNU-stack section. An executable stack is dangerous