jiebi/CodeConvo huggingface dataset:
Change:
Not sure if this is known, but I'm seeing the following error when trying to do . System: Fedora 23 Nix version: 1.11.2 Nixpkgs version: 16.09pre81657.

Discussion:
# Brute force: since nix-worker chroots don't provide # /etc/{resolv.conf,hosts}, replace all references to `localhost' # by their IPv4 equivalent. <del> for i in $(find . ( -name *.c -or -name *.conf )  -exec grep -l '<localhost>' {} ;) do echo "$i: substituting `127.0.0.1' to `localhost'..." sed -i "$i" -e's/<localhost>/127.0.0.1/g' done </del> <ins> find . ( -name *.c -or -name *.conf ) |  xargs sed -ie 's|<localhost>|127.0.0.1|g' </ins> # Make sure the tests don't rely on `/tmp', for the sake of chroot # builds. <del> for i in $(find . ( -iname *test*.c -or -name *.conf )  -exec grep -l /tmp {} ;) do echo "$i: replacing references to `/tmp' by `$TMPDIR'..." substituteInPlace "$i" --replace "/tmp" "$TMPDIR" done </del> <ins> find . ( -iname *test*.c -or -name *.conf ) |  xargs sed -ie "s|/tmp|$TMPDIR|g" </ins> # Ensure NSS installation works fine configureFlags="$configureFlags --with-nssdir=$out/lib" patchShebangs src/gns/nss/install-nss-plugin.sh <ins> sed -ie 's|@LDFLAGS@|@LDFLAGS@ $(Z_LIBS)|g'  src/regex/Makefile.in  src/fs/Makefile.in </ins> ''; doCheck = false;

''; */ <del> meta = { </del> <ins> meta = with stdenv.lib; { </ins> description = "GNU's decentralized anonymous and censorship-resistant P2P framework"; longDescription = ''

homepage = http://gnunet.org/; <del> license = stdenv.lib.licenses.gpl2Plus; </del> <ins> license = licenses.gpl2Plus; </ins> <del> maintainers = with stdenv.lib.maintainers; [ viric ]; platforms = stdenv.lib.platforms.gnu; </del> <ins> maintainers = with maintainers; [ viric vrthra ]; platforms = platforms.gnu; </ins> }; }
Change:
Not sure if this is known, but I'm seeing the following error when trying to do . System: Fedora 23 Nix version: 1.11.2 Nixpkgs version: 16.09pre81657.

Discussion:
# TODO add plugins having various licenses, see http://www.vamp-plugins.org/download.html <del> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo, libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate, libsndfile, makeWrapper, pulseaudio, qt4, redland, rubberband, vampSDK </del> <ins> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo , libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate , libsndfile, makeWrapper, pkgconfig, pulseaudio, qt4, redland , rubberband, vampSDK </ins> }: <del> stdenv.mkDerivation { name = "sonic-visualiser-1.8"; </del> <ins> stdenv.mkDerivation rec { name = "sonic-visualiser-${version}"; version = "1.9"; </ins> src = fetchurl { <del> url = http://downloads.sourceforge.net/sv1/sonic-visualiser-1.8.tar.gz; sha256 = "16ik6q9n92wljvnqcv7hyzb9v3yp3ixxp6df9kasf53fii973dh7"; </del> <ins> url = "http://code.soundsoftware.ac.uk/attachments/download/194/${name}.tar.gz"; sha256 = "00igf7j6s8xfyxnlkbqma0yby9pknxqzy8cmh0aw95ix80cw56fq"; </ins> }; buildInputs = [ libsndfile qt4 fftw /* should be fftw3f ??*/ bzip2 librdf rubberband libsamplerate vampSDK alsaLib librdf_raptor librdf_rasqal redland <ins> pkgconfig </ins> # optional jackaudio # portaudio

description = "View and analyse contents of music audio files"; homepage = http://www.sonicvisualiser.org/; license = "GPLv2"; <del> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </del> <ins> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </ins> platforms = stdenv.lib.platforms.linux; }; }
Change:
Project description A Python-3 (CPython = 3.9.0) Interpreter written in Rust Metadata homepage URL: source URL: license: mit platforms: unix, linux, darwin
I tried to package it here: but run into compilation failure:
Rustpython master builds just fine. PR in

Discussion:
inherit passthruFun; }; <ins> rustpython = callPackage ./rustpython/default.nix { inherit (darwin.apple_sdk.frameworks) SystemConfiguration; }; </ins> })

<ins> { lib , stdenv , rustPlatform , fetchFromGitHub , SystemConfiguration , python3 }: rustPlatform.buildRustPackage rec { pname = "rustpython"; version = "unstable-2021-12-09"; src = fetchFromGitHub { owner = "RustPython"; repo = "RustPython"; rev = "db3b3127df34ff5dd569301aa36ed71ae5624e4e"; sha256 = "sha256-YwGfXs3A5L/18mHnnWubPU3Y8EI9uU3keJ2HJnnTwv0="; }; cargoHash = "sha256-T85kiPG80oZ4mwpb8Ag40wDHKx2Aens+gM7NGXan5lM="; # freeze the stdlib into the rustpython binary cargoBuildFlags = "--features=freeze-stdlib"; buildInputs = lib.optionals stdenv.isDarwin [ SystemConfiguration ]; checkInputs = [ python3 ]; meta = with lib; { description = "Python 3 interpreter in written Rust"; homepage = "https://rustpython.github.io"; license = licenses.mit; maintainers = with maintainers; [ prusnak ]; # TODO: Remove once nixpkgs uses newer SDKs that supports '*at' functions. # Probably macOS SDK 10.13 or later. Check the current version in # .../os-specific/darwin/apple-sdk/default.nix # # From the build logs: # # > Undefined symbols for architecture x86_64: "_utimensat" broken = stdenv.isDarwin && stdenv.isx86_64; }; } </ins>

python3Packages = python3.pkgs; pythonInterpreters = callPackage ./../development/interpreters/python { }; <del> inherit (pythonInterpreters) python27 python37 python38 python39 python310 python3Minimal pypy27 pypy38; </del> <ins> inherit (pythonInterpreters) python27 python37 python38 python39 python310 python3Minimal pypy27 pypy38 rustpython; </ins> # Python package sets. python27Packages = python27.pkgs;
Change:
does not build. See . Steps to reproduce the behavior: to build/install the build fail with: It should build successfully. Please run and paste the result.

Discussion:
<del> { callPackage, openssl, python3, enableNpm ? true }: </del> <ins> { callPackage, fetchpatch, openssl, python3, enableNpm ? true }: </ins> let buildNodejs = callPackage ./nodejs.nix {

inherit enableNpm; version = "16.13.1"; sha256 = "1bb3rjb2xxwn6f4grjsa7m1pycp0ad7y6vz7v2d7kbsysx7h08sc"; <del> patches = [ ./disable-darwin-v8-system-instrumentation.patch ]; </del> <ins> patches = [ ./disable-darwin-v8-system-instrumentation.patch # Fixes node incorrectly building vendored OpenSSL when we want system OpenSSL. # https://github.com/nodejs/node/pull/40965 (fetchpatch { url = "https://github.com/nodejs/node/commit/65119a89586b94b0dd46b45f6d315c9d9f4c9261.patch"; sha256 = "sha256-dihKYEdK68sQIsnfTRambJ2oZr0htROVbNZlFzSAL+I="; }) ]; </ins> }
Change:
On nixos-unstable, the package does not install: is installed No maintainer but pinging who last touched Please run and paste the result.
was updated to 4.0.1 a while back. is pinning most of it's dependencies thus the issue. Looks like that could need an update (available 2.2.18, upstream 2.2.27).
So I can build the upgraded package with the following: But it doesn't look right. I guess we shouldn't blindly replace pinned versions with incompatible versions. How does nixpkgs usually deals with this?

Discussion:
{ callPackage, libsForQt5 }: let <del> stableVersion = "2.2.18"; </del> <ins> stableVersion = "2.2.28"; </ins> previewVersion = stableVersion; addVersion = args: let version = if args.stable then stableVersion else previewVersion;

}); }; commonOverrides = [ <del> (mkOverride "psutil" "5.6.7" "1an5llivfkwpbcfaapbx78p8sfnvzyfypf60wfxihib1mjr8xbgz") </del> <ins> (mkOverride "psutil" "5.8.0" "sha256-DJzLmat2Al8vC77PNB1GVunBNR24zIoDzNYuMYq0tcY=") </ins> (mkOverride "jsonschema" "3.2.0" "0ykr61yiiizgvm3bzipa3l73rvj49wmrybbfwhvpgk3pscl5pa68") ]; }; mkGui = args: libsForQt5.callPackage (import ./gui.nix (addVersion args // extraArgs)) { }; mkServer = args: callPackage (import ./server.nix (addVersion args // extraArgs)) { }; <del> guiSrcHash = "118z6asl6hsv0777rld4plnrwzkbkh3gb9lg9i6bqrjs93p028fw"; serverSrcHash = "0gd37zpvibhlvqqpflpwlrgg8g9rpbxwi9w9fsym00mfwf7sdd3b"; </del> <ins> guiSrcHash = "sha256-5GPGn0ZFlqoKkb5BOzxf2FqwPlu7hZe4ysWDGSROCj0="; serverSrcHash = "sha256-7xsgpm4KFeGFbW81/oMUGQSwXWXnBPTHzVVR0/cUe6U="; </ins> in { guiStable = mkGui { stable = true;

postFixup = '' wrapQtApp "$out/bin/gns3" ''; <ins> postPatch = '' substituteInPlace requirements.txt  --replace "sentry-sdk==1.3.1" "sentry-sdk>=1.3.1"  ''; </ins> meta = with lib; { description = "Graphical Network Simulator 3 GUI (${branch} release)";

(self: super: { aiofiles = super.aiofiles.overridePythonAttrs (oldAttrs: rec { pname = "aiofiles"; <del> version = "0.5.0"; </del> <ins> version = "0.7.0"; </ins> src = fetchFromGitHub { owner = "Tinche"; repo = pname; rev = "v${version}"; <del> sha256 = "17bsg2x5r0q6jy74hajnbp717pvbf752w0wgih6pbb4hdvfg5lcf"; </del> <ins> sha256 = "sha256-njQ7eRYJO+dUrwO5pZwKHXn9nVSGYcEhwhs3x5BMc28="; </ins> }; doCheck = false; });

postPatch = '' substituteInPlace requirements.txt  <del> --replace "aiohttp==3.6.2" "aiohttp>=3.6.2"  --replace "py-cpuinfo==7.0.0" "py-cpuinfo>=8.0.0" </del> <ins> --replace "aiohttp==3.7.4" "aiohttp>=3.7.4"  --replace "Jinja2==3.0.1" "Jinja2>=3.0.1"  --replace "sentry-sdk==1.3.1" "sentry-sdk>=1.3.1"  --replace "async-timeout==3.0.1" "async-timeout>=3.0.1"  </ins> ''; propagatedBuildInputs = with python.pkgs; [
Change:
When using lxqt, I cannot add keyboard layouts to . . button, and you'll see an empty list. After pressing button there should be a list of languages. As I can see, this happens, because the path to the is hard-coded in the lxqt itself. Probably, this file should be patched, then the issue will be resolved.
Please, test the fix in
Sorry, I'm a bit newbie with the nixos, I don't know how to test it Maybe you can tell me how to do it? Then I'll do it ASAP
Usually I test changes to desktop environments with a virtual machine. I need a local copy of the nixpkgs repository. I get a copy of the PR branch also prepare a configuration file for a basic machine: I build the system as a virtual machine: finally I run the virtual machine:

Discussion:
, libkscreen , liblxqt , libqtxdg <ins> , xkeyboard_config </ins> , xorg , lxqtUpdateScript }:

substituteInPlace lxqt-config-appearance/configothertoolkits.cpp  --replace 'QStringLiteral("gsettings'  'QStringLiteral("${glib.bin}/bin/gsettings' <ins> substituteInPlace lxqt-config-input/keyboardlayoutconfig.h  --replace '/usr/share/X11/xkb/rules/base.lst'  '${xkeyboard_config}/share/X11/xkb/rules/base.lst' </ins> ''; passthru.updateScript = lxqtUpdateScript { inherit pname version src; };
Change:
Steps to reproduce the behavior: working program Add any other context about the problem here. system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:

Discussion:
<del> { lib, stdenv, fetchFromGitHub } : </del> <ins> { lib , stdenv , fetchFromGitHub , netpbm }: </ins> stdenv.mkDerivation rec { pname = "fbcat";

sha256 = "sha256-ORzcd8XGy2BfwuPK5UX+K5Z+FYkb+tdg/gHl3zHjvbk="; }; <del> # hardcoded because makefile target "install" depends on libxslt dependencies from network # that are just too hard to monkeypatch here # so this is the simple fix. installPhase = '' mkdir -p $out install -d $out/bin install -m755 fbcat $out/bin/ install -m755 fbgrab $out/bin/ install -d $out/share/man/man1 </del> <ins> postPatch = '' substituteInPlace fbgrab  --replace 'pnmtopng' '${netpbm}/bin/pnmtopng'  --replace 'fbcat' "$out/bin/fbcat" </ins> ''; <ins> installFlags = [ "PREFIX=${placeholder "out"}" ]; </ins> meta = with lib; { homepage = "http://jwilk.net/software/fbcat"; description = "Framebuffer screenshot tool";
Change:
I am currently working on electron support for dream2nix and have a question for the electron maintainers of nixpkgs. What is the reason that LDPRELOAD is used here? This leads to errors on my system (NixOS): The cause seems to be that my current systems glibc is 2.32 but I built the electron app with 2.33. Some part of the electron app defaults to using my systems glibc. If I try to fix that by addind glibc 2.33 via , another error occurs: If I instead just remove the from the wrapper, it everything works flawlessly. Therefore my question: Do we really need that LDPRELOAD in the wrapper? If yes, is there an alternative solution possible, like putting into instead. I tried that and this doesn't break stuff. I have seen the mentioned problem with multiple electron apps, so it is not a problem of a specific app. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result. Maintainer information:
can you please check whether the fix in fixes this issue for you?

Discussion:
electronLibPath = with lib; makeLibraryPath ( [ libuuid at-spi2-atk at-spi2-core libappindicator-gtk3 ] ++ optionals (versionAtLeast version "9.0.0") [ libdrm mesa ] <ins> ++ optionals (versionOlder version "10.0.0") [ libXScrnSaver ] </ins> ++ optionals (versionAtLeast version "11.0.0") [ libxkbcommon ] ++ optionals (versionAtLeast version "12.0.0") [ libxshmfence ] ++ optionals (versionAtLeast version "17.0.0") [ libglvnd ]

$out/lib/electron/electron  ${lib.optionalString (lib.versionAtLeast version "15.0.0") "$out/lib/electron/chrome_crashpad_handler" } <del> wrapProgram $out/lib/electron/electron  --prefix LD_PRELOAD : ${lib.makeLibraryPath [ libXScrnSaver ]}/libXss.so.1  "''${gappsWrapperArgs[@]}" </del> <ins> wrapProgram $out/lib/electron/electron "''${gappsWrapperArgs[@]}" </ins> ''; };
Change:
Starting with NixOS 21.11, ships with as a plugin by default. This plugin seems to be build in a way that it fails to report its version correctly, leading to problems when tools check its version. In particular, prints which appears to be a fallback value when the version is neither derived from a git tag nor injected by a build script. This behavior unfortunately breaks docker-compose based self-hosted sentry deployments, as sentry will check and, if the former doesn't work . Under NixOS 21.05, there is no , so this works fine, but in 21.11, it breaks because is not considered = 2. Steps to reproduce the behavior: should print from its , e.g. . After reading the , I have tried to fix the derivation by adding either or but that did not make any difference in the result. I feel like I don't know enough about go packaging to fix this myself. Please run and paste the result. Maintainer information:
Hello I think your second solution can work if you change it to: You can find it in the documentation:
should this be to the package in nixpkgs?
Thanks for the super quick response :) I just tried your suggestion and it does indeed work! I'd love to see this upstream and can make a PR
I will let you do it, if it's ok for you!

Discussion:
vendorSha256 = "sha256-RzAQnuOjT8eMH+rJm+/JrF96PZbCgzDVNPQYUeXPWnY="; <ins> ldflags = ["-X github.com/docker/compose/v2/internal.Version=${version}"]; </ins> doCheck = false; installPhase = '' install -D $GOPATH/bin/cmd $out/libexec/docker/cli-plugins/docker-compose
Change:
, CVSSv3=7.3 (nixos-21.11, nixos-unstable) is a package for managing application dependencies in Ruby. In versions before 2.2.33, when working with untrusted and apparently harmless 's, it is not expected that they lead to execution of external code, unless that's explicit in the ruby code inside the itself. However, if the includes entries that use the option with invalid, but seemingly harmless, values with a leading dash, this can be false. To handle dependencies that come from a Git repository instead of a registry, Bundler uses various commands, such as . These commands are being constructed using user input (e.g. the repository URL). When building the commands, Bundler versions before 2.2.33 correctly avoid Command Injection vulnerabilities by passing an array of arguments instead of a command string. However, there is the possibility that a user input starts with a dash () and is therefore treated as an optional argument instead of a positional one. This can lead to Code Execution because some of the commands have options that can be leveraged to run arbitrary executables. Since this value comes from the file, it can contain any character, including a leading dash. To exploit this vulnerability, an attacker has to craft a directory containing a file that declares a dependency that is located in a Git repository. This dependency has to have a Git URL in the form of . This URL will be used to construct a Git clone command but will be interpreted as the upload-pack argument. Then this directory needs to be shared with the victim, who then needs to run a command that evaluates the Gemfile, such as , inside. This vulnerability can lead to Arbitrary Code Execution, which could potentially lead to the takeover of the system. However, the exploitability is very low, because it requires a lot of user interaction. Bundler 2.2.33 has patched this problem by inserting as an argument before any positional arguments to those Git commands that were affected by this issue. Regardless of whether users can upgrade or not, they should review any untrustred 's before running any commands that may read them, since they can contain arbitrary ruby code. Scanned versions: nixos-21.11: ; nixos-unstable: .
Actually this still needs a fix for 21.11.

Discussion:
inherit ruby; name = "${gemName}-${version}"; gemName = "bundler"; <del> version = "2.2.24"; source.sha256 = "1x3czmqhlyb593ap7mxkk47idi2jnbnrpwj8xlsjdpi7iair9y62"; </del> <ins> version = "2.3.6"; source.sha256 = "1531z805j3gls2x0pqp2bp1vv1rf5k7ynjl4qk72h8lpm1skqk9r"; </ins> dontPatchShebangs = true; postFixup = ''

source = Bundler::Source::Path.new(options) end spec = source.specs.search_all(name).first <del> Bundler.rubygems.with_build_args build_flags do source.install(spec) end </del> <ins> source.install(spec, :build_args => build_flags) </ins> msg = spec.post_install_message if msg
Change:
, CVSSv3=9.8 (nixos-21.05, nixos-21.11, nixos-unstable) Buffer Overflow vulnerability in of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server. Scanned versions: nixos-21.05: ; nixos-21.11: ; nixos-unstable: .
I'm thinking we're going to have to just mark this as vulnerable - upstream don't maintain the open source 1.3 branch anymore, instead there's a windows-only proprietary 2.x version.
I agree, and just opened a pull request implementing your suggestion.
alternatives to tightvnc - html teamviewer - heavy, commercial (closed source?) tigervnc looks like a worthy replacement, and we should remove tightvnc from nixpkgs

Discussion:
maintainers = []; platforms = lib.platforms.unix; <ins> knownVulnerabilities = [ "CVE-2021-42785" ]; # Unfortunately, upstream doesn't maintain the 1.3 branch anymore, and the # new 2.x branch is substantially different (requiring either Windows or Java) </ins> }; }
Change:
fails when building the wheel for pip. (Building the wheel for wheel succeeds.) Steps to reproduce the behavior: Build succeeds as it does for regular Python: (there are no maintainers given)
Which branch is this on?
~Can't reproduce this on master nor on nixos-22.05.~ pypy version succeeds, pypy3 version fails. master and nixos-22.05
Probably also on 21.11. -No, 21.11 is fine. -
Encountered on Nixpkgs 21.11 system: host os: multi-user?: sandbox: version: nixpkgs:
Bisected to the 7.3.7 update. Newer pypy3 versions exhibit the same problem. Our pypy3 package set is clearly unmaintained. cc
Fixed in .

Discussion:
let isPy3k = (lib.versions.major pythonVersion) == "3"; <ins> isPy38OrNewer = lib.versionAtLeast pythonVersion "3.8"; </ins> isPy39OrNewer = lib.versionAtLeast pythonVersion "3.9"; <del> passthru = passthruFun { </del> <ins> passthru = passthruFun rec { </ins> inherit self sourceVersion pythonVersion packageOverrides; implementation = "pypy"; libPrefix = "pypy${pythonVersion}"; executable = "pypy${if isPy39OrNewer then lib.versions.majorMinor pythonVersion else lib.optionalString isPy3k "3"}"; <del> sitePackages = "site-packages"; </del> <ins> sitePackages = "${lib.optionalString isPy38OrNewer "lib/${libPrefix}/"}site-packages"; </ins> hasDistutilsCxxPatch = false; inherit pythonAttr;

ln -s $out/${executable}-c/lib-python/${if isPy3k then "3" else pythonVersion} $out/lib/${libPrefix} # Include a sitecustomize.py file <del> cp ${../sitecustomize.py} $out/lib/${libPrefix}/${sitePackages}/sitecustomize.py </del> <ins> cp ${../sitecustomize.py} $out/${if isPy38OrNewer then sitePackages else "lib/${libPrefix}/${sitePackages}"}/sitecustomize.py </ins> runHook postInstall '';
Change:
name: nano current version: 5.9 desired version: 6.0 maintainers: Please tag this issue in your PR.

Discussion:
in stdenv.mkDerivation rec { pname = "nano"; <del> version = "5.9"; </del> <ins> version = "6.0"; </ins> src = fetchurl { url = "mirror://gnu/nano/${pname}-${version}.tar.xz"; <del> sha256 = "dX24zaS7KHNZnkd4OvRj47VHpiewyrsw6nv3H7TCSTc="; </del> <ins> sha256 = "k6yMtotK0Q4KrrgKLdFcW7ietmWkhE960Bxn78sWnqI="; </ins> }; nativeBuildInputs = [ texinfo ] ++ optional enableNls gettext;
Change:
I can't figure out which are the problematic lines! 5 and 9 do not seem to be any valid lines considering the error descriptions, or they're the lines in the expanded output(??) - I don't get it. I hope it wasn't something I did here: this /etc/nixos/nixpkgs/ git pull (this was last: ) sudo -i nixos-rebuild switch --fallback System: (Flounder) Nix version: nix-env (Nix) 1.11.2 Nixpkgs version: ""

Discussion:
''; </programlisting> <del> The main difference is that preceding whitespace is automatically stripped from each line, and that characters like </del> <ins> The main difference is that it strips from each line a number of spaces equal to the minimal indentation of the string as a whole (disregarding the indentation of empty lines), and that characters like </ins> <literal>"</literal> and <literal></literal> are not special (making it more convenient for including things like shell <del> code).</para> </del> <ins> code). See more info about this in the Nix manual <link xlink:href="https://nixos.org/nix/manual/#ssec-values">here</link>.</para> </ins> </listitem> </varlistentry>