Recent searches
Search options
#musl
0 posts0 participants0 posts today
I kind of wish there was a version of Alpine that was libc based - just for desktop NVIDIA support really.
Replied in thread
Replied in thread
Got some complaints the #musl git server was sometimes giving errors from too much load. Load caused by abusive LLM scrapers hammering cgit. So I added frontend rules that apply a 10 byte/sec rate limit to client IPs hammering >5 requests per 10 sec for the duration of the hammering. Load average has plummeted. 
Continued thread
Oh great, it doesn’t boot. Init fails to launch.
Is it because I used musl instead of glibc? I’ll never know because NO FUCKING ERRORS ARE OUTPUTTED.
Someone, please tell me how to try make a distro with musl… I’m really stupid.
Do I use another #Distro like alpine as a base or?
Thought that would probably make me a lot more productive on #musl, musl-cross-make, etc.:
When there's an open issue that needs any sort of testing cycle feedback, scheduling real-time chat with the reporter or patch submitter to go through it until it's resolved.
That's what just finally cleared some backlog on multiple longstanding musl-cross-make failures.
Heads up maintainers: there's a static analysis tool Svace, and perhaps some AI-slop tool built on top of it, producing very wrong analysis. So far #musl has gotten 6 patch submissions based on it and they're all wrong and mostly unmotivated.
In one case it claimed possible null pointer dereference when the code in question was already immediately conditional on the pointer being non-null.
FWIW this is what Samsung uses to find and "fix" bugs in their fork of Android... 
Continued thread
Document I was searching for in case anyone is curious:
www.openwall.commusl - Proposed "AI" policies
#musl #vulnerability https://www.openwall.com/lists/musl/2025/02/13/1
I guess #openwrt and #alpine system should be all upgraded now once fixes are available.
www.openwall.commusl - CVE-2025-26519: musl libc: input-controlled out-of-bounds write
primitive in iconv()
Replied in thread
@krishean that's not how #systemd works.
SystemD was created because #SysVinit was shit and noone fixed it or made something better.
#Wayland is the future as #Xorg is being #EoL'd.
- #Linux as a Kernel works fine, so no reason to replace it.
For the shitty #GlibC we have alternatives like #bionic and espechally #musl!
Replied in thread
@simontatham Pardon my straying from the joke, but FYI: #musl libc has a super compact representation for finding the rule for case mapping for a particular character. Under 5k for tables plus code. We don't have the car emoji mapping tho.
#musl mallocng just caught an interesting type of buffer overflow in mc: decrement of offset past start of buffer and overwrite of byte below allocated memory with '\0'.
Replied in thread
@ireneista @marshray @gregly @rootfake @GavinChait @cwebber Reading bug reports for building software against #musl, I see examples again and again where the programmers have copied some Rube Goldberg machine of ifdefs or other hacks where there was a simple portable way to do what they needed.
Replied in thread
@lavxnews point is: "reinventing the wheel" is rarely easy nor worth the effort.
- Shure one can design their own OS or Kernel but the cost of doing so rarely makes sense.
That's why I use #Linux, #toybox and #musl for
OS/1337 ...
- Same reason why noone spins their own #encryption, except here it's a matter if #ITsec and thus #InfoSec, #CopSec & #OpSec!
Continued thread
Where it always comes up: we run into code that's either not compiling with #musl or compiling but then failing to do the right thing at runtime, because it's doing some convoluted nonportable dance in place of a direct and simple thing that would have worked on any system.
And the bad thing it's doing is a pattern that's somehow become popular, probably from a few major pieces of sw doing it.
And I want to say it's "cargo culted", but that term perpetuates a racist myth..
Continued thread
This is why I don't even mirror #musl on github. It would bury the real source.
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=765325951ac5c7d072278c9424930b29657e9758
In addition to fixing the dnssec bypass weakness here (https://sourceware.org/bugzilla/show_bug.cgi?id=27929) this will hopefully help normalize #musl doing the secure thing always, and reduce reports of it as a bug.