)]}'
{"id":"depot~13865","triplet_id":"depot~canon~Ie5273446c4a19403088d0389ae8e3f473af8879a","project":"depot","branch":"canon","attention_set":{"1000001":{"account":{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},"last_update":"2025-11-16 14:39:25.000000000","reason":"\u003cGERRIT_ACCOUNT_1000034\u003e replied on the change","reason_account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"removed_from_attention_set":{"1000034":{"account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"last_update":"2026-03-14 14:45:00.000000000","reason":"Removed by \u003cGERRIT_ACCOUNT_1000034\u003e by clicking the attention icon","reason_account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"hashtags":[],"change_id":"Ie5273446c4a19403088d0389ae8e3f473af8879a","subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","status":"NEW","created":"2025-11-16 14:15:11.000000000","updated":"2026-03-14 14:45:00.000000000","submit_type":"REBASE_ALWAYS","submittable":true,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"74924da713742091aebf7695c75b22a57a350424","_number":13865,"virtual_id_number":13865,"owner":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"actions":{},"labels":{"Code-Review":{"approved":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"all":[{"value":2,"date":"2026-01-17 03:34:29.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{"-2":"This shall not be merged","-1":"I would prefer this is not merged as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0},"Verified":{"approved":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"all":[{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"tag":"autogenerated:buildkite~result","value":1,"date":"2025-12-30 15:51:08.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{"-1":"Fails"," 0":"No score","+1":"Verified"},"description":"","default_value":0},"Autosubmit":{"all":[{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{" 0":"Submit manually","+1":"Submit automatically"},"description":"","default_value":0,"optional":true},"All-Comments-Resolved":{"approved":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}},"Conformant-Commit-Message":{"approved":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2025-11-16 14:15:13.000000000","updated_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"reviewer":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2025-11-16 14:38:53.000000000","updated_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"reviewer":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2025-11-16 14:39:25.000000000","updated_by":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"reviewer":{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},"state":"REVIEWER"},{"updated":"2026-01-17 03:34:29.000000000","updated_by":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"reviewer":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"state":"REVIEWER"}],"messages":[{"id":"ec9936255a365c9e309f00cc1cdeb0db49c12380","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 14:15:11.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"217516f56cee7b7ad59ff12c07ce692b7e23befb","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 14:15:13.000000000","message":"Patch Set 1:\n\nStarted build for patchset #1 on: https://buildkite.com/tvl/depot/builds/40634","accounts_in_message":[],"_revision_number":1},{"id":"269db4a45716277709ebcad19cf657cbab004b7a","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 14:38:53.000000000","message":"Patch Set 1: Verified+1\n\nBuild of patchset 1 passed: https://buildkite.com/tvl/depot/builds/40640","accounts_in_message":[],"_revision_number":1},{"id":"4b958b590b90783ab24ba827258031fd96e425a3","tag":"autogenerated:gerrit:code-owners:addReviewer","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 14:39:25.000000000","message":"\u003cGERRIT_ACCOUNT_1000001\u003e, who was added as reviewer owns the following files:\n* `third_party/cppnix/package.nix`\n* `third_party/cppnix/src/libstore/build.cc`\n","accounts_in_message":[{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"}],"_revision_number":1},{"id":"8f6f54849a51bcd8a748f871ddcb26e01bb04101","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:05:32.000000000","message":"Uploaded patch set 2: New patch set was added with same tree, parent tree, and commit message as Patch Set 1.\n\nCopied Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND **changekind:NO_CODE_CHANGE**) OR **changekind:NO_CHANGE**\")\n","accounts_in_message":[],"_revision_number":2},{"id":"533db972fdc2b9bb6cf8ae05bc6f81209e14eb45","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:45:03.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":3},{"id":"a6cb35909c1300e204c5f9f2f29148705f802c81","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 18:45:11.000000000","message":"Patch Set 3:\n\nStarted build for patchset #3 on: https://buildkite.com/tvl/depot/builds/40660","accounts_in_message":[],"_revision_number":3},{"id":"b77bd702b7eaa777121b62ff9ed6fe040ecb3f79","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 19:11:34.000000000","message":"Patch Set 3: Verified+1\n\nBuild of patchset 3 passed: https://buildkite.com/tvl/depot/builds/40660","accounts_in_message":[],"_revision_number":3},{"id":"c6dcbf8f036a4d601730224884e6fdecf537872e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 21:37:13.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":4},{"id":"e8b69deb6523e586eb727ce93e9a05aa5a7846f8","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 21:37:20.000000000","message":"Patch Set 4:\n\nStarted build for patchset #4 on: https://buildkite.com/tvl/depot/builds/40689","accounts_in_message":[],"_revision_number":4},{"id":"a9789097f36abe48401a95c00b7599cdb0063e79","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 21:59:26.000000000","message":"Patch Set 4: Verified-1\n\nBuild of patchset 4 failed: https://buildkite.com/tvl/depot/builds/40689","accounts_in_message":[],"_revision_number":4},{"id":"986f5f6966a3182e1414e7461026697c644988f4","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 22:25:17.000000000","message":"Patch Set 4: Verified+1\n\nBuild of patchset 4 passed: https://buildkite.com/tvl/depot/builds/40696","accounts_in_message":[],"_revision_number":4},{"id":"8180b2459fb76f8274e2921d2a672eb0dc3a3820","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-12-10 22:31:02.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":5},{"id":"a9e60605a3e0f2ce1316b9a0bbb6feec87d82da8","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-12-10 22:31:06.000000000","message":"Patch Set 5:\n\nStarted build for patchset #5 on: https://buildkite.com/tvl/depot/builds/40778","accounts_in_message":[],"_revision_number":5},{"id":"df455f04497a7df65d0a756c6cf44cd198429283","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-12-10 22:38:36.000000000","message":"Patch Set 5: Verified-1\n\nBuild of patchset 5 failed: https://buildkite.com/tvl/depot/builds/40778","accounts_in_message":[],"_revision_number":5},{"id":"26726ff439d23d9428a48b582cf4ff72dd072a94","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-12-30 15:51:08.000000000","message":"Patch Set 5: Verified+1\n\nBuild of patchset 5 passed: https://buildkite.com/tvl/depot/builds/40840","accounts_in_message":[],"_revision_number":5},{"id":"6a755376c4e80b7f36271880485409b9deb9c257","author":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"date":"2026-01-17 03:34:29.000000000","message":"Patch Set 5: Code-Review+2","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"f3b669044f7783df1ff1b9efea0ea74b3e0f7345","revisions":{"e3942ccd525791a0979d61e6d7e598286ccbf056":{"kind":"REWORK","_number":1,"created":"2025-11-16 14:15:11.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/65/13865/1","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/65/13865/1","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/65/13865/1"}}},"commit":{"parents":[{"commit":"c3524af079efcc739a37d767635ad23fdbcda4bc","subject":"feat(3p/cppnix/libutil): writeFile variant for file descriptors","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003dc3524af079efcc739a37d767635ad23fdbcda4bc"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 09:53:17.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 14:08:04.000000000","tz":60},"subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","message":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir\n\nThis ensures that `passAsFile` data is created inside the expected\ntemporary build directory by `openat()` from the parent directory file\ndescriptor.\n\nFixes CVE-2025-52993.\n\nChange-Id: Ie5273446c4a19403088d0389ae8e3f473af8879a\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003de3942ccd525791a0979d61e6d7e598286ccbf056"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003de3942ccd525791a0979d61e6d7e598286ccbf056"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"c3524af079efcc739a37d767635ad23fdbcda4bc","is_merged_in_target_branch":false,"change_id":"Ib871a5283a9c047db1e4fe48a241506e4aab9192","change_number":13864,"patch_set_number":1,"change_status":"NEW"}],"branch":"refs/heads/canon"},"d3f8cb2bc3af1d492200a499242b38d710182c7b":{"kind":"NO_CHANGE","_number":2,"created":"2025-11-16 18:05:32.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/65/13865/2","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/65/13865/2","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/65/13865/2"}}},"commit":{"parents":[{"commit":"b29f20163738494618363c215e1b03a48b71f43d","subject":"feat(3p/cppnix/libutil): writeFile variant for file descriptors","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003db29f20163738494618363c215e1b03a48b71f43d"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 09:53:17.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:05:28.000000000","tz":60},"subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","message":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir\n\nThis ensures that `passAsFile` data is created inside the expected\ntemporary build directory by `openat()` from the parent directory file\ndescriptor.\n\nFixes CVE-2025-52993.\n\nChange-Id: Ie5273446c4a19403088d0389ae8e3f473af8879a\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003dd3f8cb2bc3af1d492200a499242b38d710182c7b"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003dd3f8cb2bc3af1d492200a499242b38d710182c7b"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"b29f20163738494618363c215e1b03a48b71f43d","is_merged_in_target_branch":false,"change_id":"Ib871a5283a9c047db1e4fe48a241506e4aab9192","change_number":13864,"patch_set_number":2,"change_status":"NEW"}],"branch":"refs/heads/canon"},"6fc60f3e3121b1480ba9fca13e807210c4b2e2a0":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2025-11-16 18:45:03.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/65/13865/3","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/65/13865/3","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/65/13865/3"}}},"commit":{"parents":[{"commit":"3b8db9f21bf21078b27cb3ba7c6005de3473e453","subject":"feat(3p/cppnix/libutil): writeFile variant for file descriptors","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d3b8db9f21bf21078b27cb3ba7c6005de3473e453"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 09:53:17.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:44:53.000000000","tz":60},"subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","message":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir\n\nThis ensures that `passAsFile` data is created inside the expected\ntemporary build directory by `openat()` from the parent directory file\ndescriptor.\n\nFixes CVE-2025-52993.\n\nChange-Id: Ie5273446c4a19403088d0389ae8e3f473af8879a\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d6fc60f3e3121b1480ba9fca13e807210c4b2e2a0"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d6fc60f3e3121b1480ba9fca13e807210c4b2e2a0"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"3b8db9f21bf21078b27cb3ba7c6005de3473e453","is_merged_in_target_branch":false,"change_id":"Ib871a5283a9c047db1e4fe48a241506e4aab9192","change_number":13864,"patch_set_number":3,"change_status":"NEW"}],"branch":"refs/heads/canon"},"7a6aa644adb92c224b004867a1846d13c70376c6":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2025-11-16 21:37:13.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/65/13865/4","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/65/13865/4","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/65/13865/4"}}},"commit":{"parents":[{"commit":"284d26401faf498a6913147a193a6a29613e9fde","subject":"feat(3p/cppnix/libutil): writeFile variant for file descriptors","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d284d26401faf498a6913147a193a6a29613e9fde"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 09:53:17.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 21:37:08.000000000","tz":60},"subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","message":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir\n\nThis ensures that `passAsFile` data is created inside the expected\ntemporary build directory by `openat()` from the parent directory file\ndescriptor.\n\nFixes CVE-2025-52993.\n\nChange-Id: Ie5273446c4a19403088d0389ae8e3f473af8879a\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d7a6aa644adb92c224b004867a1846d13c70376c6"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d7a6aa644adb92c224b004867a1846d13c70376c6"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"284d26401faf498a6913147a193a6a29613e9fde","is_merged_in_target_branch":false,"change_id":"Ib871a5283a9c047db1e4fe48a241506e4aab9192","change_number":13864,"patch_set_number":4,"change_status":"NEW"}],"branch":"refs/heads/canon"},"f3b669044f7783df1ff1b9efea0ea74b3e0f7345":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2025-12-10 22:31:02.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/65/13865/5","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/65/13865/5","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/65/13865/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/65/13865/5"}}},"commit":{"parents":[{"commit":"e21953270ad5f1338254b45fa6fc55a77068ddb3","subject":"feat(3p/cppnix/libutil): writeFile variant for file descriptors","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003de21953270ad5f1338254b45fa6fc55a77068ddb3"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 09:53:17.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-12-10 22:28:40.000000000","tz":60},"subject":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir","message":"fix(cppnix/libstore): ensure `passAsFile` is created in orig tmpdir\n\nThis ensures that `passAsFile` data is created inside the expected\ntemporary build directory by `openat()` from the parent directory file\ndescriptor.\n\nFixes CVE-2025-52993.\n\nChange-Id: Ie5273446c4a19403088d0389ae8e3f473af8879a\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003df3b669044f7783df1ff1b9efea0ea74b3e0f7345"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003df3b669044f7783df1ff1b9efea0ea74b3e0f7345"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"e21953270ad5f1338254b45fa6fc55a77068ddb3","is_merged_in_target_branch":false,"change_id":"Ib871a5283a9c047db1e4fe48a241506e4aab9192","change_number":13864,"patch_set_number":5,"change_status":"NEW"}],"branch":"refs/heads/canon"}},"requirements":[{"status":"OK","fallback_text":"Code-Owners","type":"code-owners"}],"submit_records":[{"rule_name":"gerrit~PrologRule","status":"OK","labels":[{"label":"Autosubmit","status":"MAY"},{"label":"Conformant-Commit-Message","status":"OK","applied_by":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}},{"label":"All-Comments-Resolved","status":"OK","applied_by":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}},{"label":"Verified","status":"OK","applied_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"}}]},{"rule_name":"Code-Owners","status":"OK","requirements":[{"status":"OK","fallback_text":"Code-Owners","type":"code-owners"}]}],"submit_requirements":[{"name":"All-Comments-Resolved","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:All-Comments-Resolved\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:All-Comments-Resolved\u003dgerrit~PrologRule"],"failing_atoms":[]}},{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dgerrit~PrologRule"],"failing_atoms":[]}},{"name":"Code-Owners","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"rule:Code-Owners","fulfilled":true,"status":"PASS","passing_atoms":["Code-Owners"],"failing_atoms":[]}},{"name":"Conformant-Commit-Message","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Conformant-Commit-Message\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:Conformant-Commit-Message\u003dgerrit~PrologRule"],"failing_atoms":[]}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dgerrit~PrologRule"],"failing_atoms":[]}}]}