)]}'
{"id":"depot~13868","triplet_id":"depot~canon~I6b3fc766bad2afe54dc27d47d1df3873e188de96","project":"depot","branch":"canon","attention_set":{"1000001":{"account":{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},"last_update":"2025-11-16 18:31:29.000000000","reason":"\u003cGERRIT_ACCOUNT_1000034\u003e replied on the change","reason_account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"removed_from_attention_set":{"1000034":{"account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"last_update":"2026-03-14 14:45:02.000000000","reason":"Removed by \u003cGERRIT_ACCOUNT_1000034\u003e by clicking the attention icon","reason_account":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"hashtags":[],"change_id":"I6b3fc766bad2afe54dc27d47d1df3873e188de96","subject":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds","status":"NEW","created":"2025-11-16 14:15:11.000000000","updated":"2026-03-14 14:45:02.000000000","submit_type":"REBASE_ALWAYS","submittable":false,"total_comment_count":9,"unresolved_comment_count":7,"has_review_started":true,"meta_rev_id":"f4238cbf7e5917a382c3096f1943e1b4eb363032","_number":13868,"virtual_id_number":13868,"owner":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"actions":{},"labels":{"Code-Review":{"recommended":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"all":[{"value":1,"date":"2026-01-17 03:18:02.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{"-2":"This shall not be merged","-1":"I would prefer this is not merged as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","value":1,"default_value":0},"Verified":{"approved":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"all":[{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"tag":"autogenerated:buildkite~result","value":1,"date":"2025-12-10 22:51:48.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{"-1":"Fails"," 0":"No score","+1":"Verified"},"description":"","default_value":0},"Autosubmit":{"approved":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"all":[{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},{"value":1,"date":"2025-12-10 22:31:02.000000000","permitted_voting_range":{"min":0,"max":1},"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}],"values":{" 0":"Submit manually","+1":"Submit automatically"},"description":"","default_value":0,"optional":true},"All-Comments-Resolved":{},"Conformant-Commit-Message":{"approved":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2025-11-16 14:15:16.000000000","updated_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"reviewer":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2025-11-16 18:17:38.000000000","updated_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"reviewer":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2025-11-16 18:31:29.000000000","updated_by":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"reviewer":{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"},"state":"REVIEWER"},{"updated":"2026-01-17 03:18:02.000000000","updated_by":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"reviewer":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"state":"REVIEWER"}],"messages":[{"id":"942af386eb474cc16ea0db3e9990b681744bd425","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 14:15:11.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"24cb6cc4532a72deb40902e22c8c864b336b4e1b","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 14:15:16.000000000","message":"Patch Set 1:\n\nStarted build for patchset #1 on: https://buildkite.com/tvl/depot/builds/40637","accounts_in_message":[],"_revision_number":1},{"id":"5a529930ab3a4e8474921a3a85344758c560024d","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 14:16:40.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"5dc6c0bbabf13b5180ba1769d2271393c3289861","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:05:32.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"1af23d6a2612ea967ecd4812578f4581c6029072","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 18:05:35.000000000","message":"Patch Set 2:\n\nStarted build for patchset #2 on: https://buildkite.com/tvl/depot/builds/40649","accounts_in_message":[],"_revision_number":2},{"id":"bfce6fe31933837c919c40bea0bec843f35c960d","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:08:02.000000000","message":"Patch Set 2:\n\n(2 comments)","accounts_in_message":[],"_revision_number":2},{"id":"21a5c312a1c91abbd5caaffda59b4416eaf93248","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 18:17:38.000000000","message":"Patch Set 2: Verified-1\n\nBuild of patchset 2 failed: https://buildkite.com/tvl/depot/builds/40649","accounts_in_message":[],"_revision_number":2},{"id":"827e4238b41bc5df0375fccc90eaa6956636b7f5","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 18:29:32.000000000","message":"Patch Set 2: Verified+1\n\nBuild of patchset 2 passed: https://buildkite.com/tvl/depot/builds/40654","accounts_in_message":[],"_revision_number":2},{"id":"39e557ee1724e50996281db938dfd50055291087","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:31:29.000000000","message":"Patch Set 2: Autosubmit+1","accounts_in_message":[],"_revision_number":2},{"id":"f89d931eea6654c4afcf764d7ff4808796abddeb","tag":"autogenerated:gerrit:code-owners:addReviewer","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:31:29.000000000","message":"\u003cGERRIT_ACCOUNT_1000001\u003e, who was added as reviewer owns the following files:\n* `third_party/cppnix/package.nix`\n* `third_party/cppnix/src/libutil/util.cc`\n","accounts_in_message":[{"_account_id":1000001,"name":"tazjin","email":"tazjin@tvl.su","username":"tazjin"}],"_revision_number":2},{"id":"8167e3097b545e62caba299e8e3bf4ea4509b8e2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:32:22.000000000","message":"Uploaded patch set 3: Commit message was updated.\n\nCopied Votes:\n* Autosubmit+1 (copy condition: \"changekind:NO_CHANGE OR **is:ANY**\")\n* Verified+1 (copy condition: \"(**is:ANY** AND **changekind:NO_CODE_CHANGE**) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":3},{"id":"54fac6dc7787088ce73d96d388231ae8df0d5534","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:33:07.000000000","message":"Uploaded patch set 4: Commit message was updated.\n\nCopied Votes:\n* Autosubmit+1 (copy condition: \"changekind:NO_CHANGE OR **is:ANY**\")\n* Verified+1 (copy condition: \"(**is:ANY** AND **changekind:NO_CODE_CHANGE**) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":4},{"id":"d4b87bb0d4d62e4a1d828b04e002a450bbd26134","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 18:45:03.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.\n\nCopied Votes:\n* Autosubmit+1 (copy condition: \"changekind:NO_CHANGE OR **is:ANY**\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":5},{"id":"6e287de6515a5918cf8daeea93fbcf6e24bf6e63","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 18:45:17.000000000","message":"Patch Set 5:\n\nStarted build for patchset #5 on: https://buildkite.com/tvl/depot/builds/40665","accounts_in_message":[],"_revision_number":5},{"id":"8fd94d644bcd346d37e25c81c413b999cb5cf706","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 19:25:01.000000000","message":"Patch Set 5: Verified+1\n\nBuild of patchset 5 passed: https://buildkite.com/tvl/depot/builds/40665","accounts_in_message":[],"_revision_number":5},{"id":"f8f1b866707324ab7b0331635eb409d263dc1289","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-11-16 21:37:13.000000000","message":"Uploaded patch set 6: Patch Set 5 was rebased.\n\nCopied Votes:\n* Autosubmit+1 (copy condition: \"changekind:NO_CHANGE OR **is:ANY**\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":6},{"id":"ff32f8096549549ea2c7a97dc9a2ffa27e7f8116","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 21:37:25.000000000","message":"Patch Set 6:\n\nStarted build for patchset #6 on: https://buildkite.com/tvl/depot/builds/40693","accounts_in_message":[],"_revision_number":6},{"id":"22764a32f4df45aa2938353d9461148bc9373452","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-11-16 22:08:16.000000000","message":"Patch Set 6: Verified+1\n\nBuild of patchset 6 passed: https://buildkite.com/tvl/depot/builds/40693","accounts_in_message":[],"_revision_number":6},{"id":"c1ba2e3c6d8f188e919c98cc8c28137f2c26bb51","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"date":"2025-12-10 22:31:02.000000000","message":"Uploaded patch set 7: Patch Set 6 was rebased.\n\nCopied Votes:\n* Autosubmit+1 (copy condition: \"changekind:NO_CHANGE OR **is:ANY**\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"(**is:ANY** AND changekind:NO_CODE_CHANGE) OR changekind:NO_CHANGE\")\n","accounts_in_message":[],"_revision_number":7},{"id":"5f4057f560362b07fbe04d8cdcf882d0ea276570","tag":"autogenerated:buildkite~trigger","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-12-10 22:31:11.000000000","message":"Patch Set 7:\n\nStarted build for patchset #7 on: https://buildkite.com/tvl/depot/builds/40782","accounts_in_message":[],"_revision_number":7},{"id":"e118956bea2bc370b73e73b701e05ff68d3ded01","tag":"autogenerated:buildkite~result","author":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]},"date":"2025-12-10 22:51:48.000000000","message":"Patch Set 7: Verified+1\n\nBuild of patchset 7 passed: https://buildkite.com/tvl/depot/builds/40782","accounts_in_message":[],"_revision_number":7},{"id":"8167707d5e1459a84fc16783685a8acaa2af4737","author":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"date":"2026-01-17 03:18:02.000000000","message":"Patch Set 7: Code-Review+1\n\n(5 comments)","accounts_in_message":[],"_revision_number":7},{"id":"0c77278d5b54fa4564addcb35d872568fa0cc179","author":{"_account_id":1000066,"name":"Adam Joseph","display_name":"amjoseph","email":"adam@westernsemico.com","username":"amjoseph"},"date":"2026-01-17 07:42:47.000000000","message":"Patch Set 7:\n\n(1 comment)","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"ebd034024cfde106895bbece9b5ab21bd89a7e88","revisions":{"6e87c5f9c136bdd82257ae1403fcb486108e4e95":{"kind":"REWORK","_number":1,"created":"2025-11-16 14:15:11.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/1","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/1","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/1"}}},"commit":{"parents":[{"commit":"842ef92a0f55c03cf9e5443faf72a842c4960169","subject":"fix(3p/cppnix/libutil): return ENFILE instead of EBADF when no fds","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d842ef92a0f55c03cf9e5443faf72a842c4960169"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 14:14:33.000000000","tz":60},"subject":"fix(3p/cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds","message":"fix(3p/cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d6e87c5f9c136bdd82257ae1403fcb486108e4e95"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d6e87c5f9c136bdd82257ae1403fcb486108e4e95"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"842ef92a0f55c03cf9e5443faf72a842c4960169","is_merged_in_target_branch":false,"change_id":"I0fc57bc1598f47d804bbb40e598cfcef4807aa35","change_number":13867,"patch_set_number":1,"change_status":"NEW"}],"branch":"refs/heads/canon"},"5c2c7f6e160e932b283001d786e04edaabf65d1c":{"kind":"REWORK","_number":2,"created":"2025-11-16 18:05:32.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/2","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/2","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/2"}}},"commit":{"parents":[{"commit":"3758879f2db726b3ed719562bad00d78d6af6ed1","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d3758879f2db726b3ed719562bad00d78d6af6ed1"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:05:28.000000000","tz":60},"subject":"fix(3p/cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds","message":"fix(3p/cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d5c2c7f6e160e932b283001d786e04edaabf65d1c"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d5c2c7f6e160e932b283001d786e04edaabf65d1c"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"3758879f2db726b3ed719562bad00d78d6af6ed1","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":1,"change_status":"NEW"}],"branch":"refs/heads/canon"},"a8ecdb93763b9d0c462e7d293cff9b37a2a3f93e":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2025-11-16 18:32:22.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/3","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/3","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/3"}}},"commit":{"parents":[{"commit":"3758879f2db726b3ed719562bad00d78d6af6ed1","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d3758879f2db726b3ed719562bad00d78d6af6ed1"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:31:46.000000000","tz":60},"subject":"fix(cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds","message":"fix(cppnix/libutil): ensure `_deletePath` doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003da8ecdb93763b9d0c462e7d293cff9b37a2a3f93e"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003da8ecdb93763b9d0c462e7d293cff9b37a2a3f93e"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"3758879f2db726b3ed719562bad00d78d6af6ed1","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":1,"change_status":"NEW"}],"branch":"refs/heads/canon"},"f69bfe9503dc90a6ee9fd4a56f87603a7c8539d5":{"kind":"NO_CODE_CHANGE","_number":4,"created":"2025-11-16 18:33:07.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/4","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/4","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/4"}}},"commit":{"parents":[{"commit":"3758879f2db726b3ed719562bad00d78d6af6ed1","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d3758879f2db726b3ed719562bad00d78d6af6ed1"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:32:59.000000000","tz":60},"subject":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds","message":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003df69bfe9503dc90a6ee9fd4a56f87603a7c8539d5"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003df69bfe9503dc90a6ee9fd4a56f87603a7c8539d5"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"3758879f2db726b3ed719562bad00d78d6af6ed1","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":1,"change_status":"NEW"}],"branch":"refs/heads/canon"},"b3a63cf518c6788cd50c11174dd905eb1494a9ae":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2025-11-16 18:45:03.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/5","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/5","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/5"}}},"commit":{"parents":[{"commit":"d1141ed8ed52881861fa9cbd08767f24df687697","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003dd1141ed8ed52881861fa9cbd08767f24df687697"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 18:44:53.000000000","tz":60},"subject":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds","message":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003db3a63cf518c6788cd50c11174dd905eb1494a9ae"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003db3a63cf518c6788cd50c11174dd905eb1494a9ae"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"d1141ed8ed52881861fa9cbd08767f24df687697","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":2,"change_status":"NEW"}],"branch":"refs/heads/canon"},"06ff605c88a76068ba7e630813741abf73a4442d":{"kind":"TRIVIAL_REBASE","_number":6,"created":"2025-11-16 21:37:13.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/6","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/6","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/6"}}},"commit":{"parents":[{"commit":"6349af2637c28afd9dc50fc08482dcaf17e00110","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d6349af2637c28afd9dc50fc08482dcaf17e00110"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-11-16 21:37:08.000000000","tz":60},"subject":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds","message":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d06ff605c88a76068ba7e630813741abf73a4442d"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d06ff605c88a76068ba7e630813741abf73a4442d"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"6349af2637c28afd9dc50fc08482dcaf17e00110","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":3,"change_status":"NEW"}],"branch":"refs/heads/canon"},"ebd034024cfde106895bbece9b5ab21bd89a7e88":{"kind":"TRIVIAL_REBASE","_number":7,"created":"2025-12-10 22:31:02.000000000","uploader":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"},"ref":"refs/changes/68/13868/7","fetch":{"anonymous http":{"url":"https://cl.tvl.fyi/depot","ref":"refs/changes/68/13868/7","commands":{"Checkout":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://cl.tvl.fyi/depot refs/changes/68/13868/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://cl.tvl.fyi/depot refs/changes/68/13868/7"}}},"commit":{"parents":[{"commit":"37fa073f6f9d500683ad73a9382a3cc279910743","subject":"fix(3p/cppnix/libstore): don\u0027t create empty entries in redirectedOutputs","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003d37fa073f6f9d500683ad73a9382a3cc279910743"}]}],"author":{"name":"Raito Bezarius","email":"raito@lix.systems","date":"2025-06-29 10:14:01.000000000","tz":0},"committer":{"name":"sterni","email":"sternenseemann@systemli.org","date":"2025-12-10 22:28:40.000000000","tz":60},"subject":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds","message":"fix(cppnix/libutil): ensure _deletePath doesn\u0027t use abs paths w/ dirfds\n\nWhen calling `_deletePath` with a parent file descriptor, `openat` is\nmade effective by using relative paths to the directory file descriptor.\n\nTo avoid the problem, the signature is changed to resist misuse with an\nassert in the prologue of the function.\n\nFixes CVE-2025-46415.\n\nChange-Id: I6b3fc766bad2afe54dc27d47d1df3873e188de96\nSigned-off-by: Raito Bezarius \u003craito@lix.systems\u003e\n","web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003debd034024cfde106895bbece9b5ab21bd89a7e88"}],"resolve_conflicts_web_links":[{"name":"cgit","tooltip":"Open in GitWeb","url":"https://code.tvl.fyi/commit/?id\u003debd034024cfde106895bbece9b5ab21bd89a7e88"}]},"parents_data":[{"branch_name":"refs/heads/canon","commit_id":"37fa073f6f9d500683ad73a9382a3cc279910743","is_merged_in_target_branch":false,"change_id":"Ib8b33dd8ec10ca61002675e3a29d207b2f34b2f5","change_number":13872,"patch_set_number":4,"change_status":"NEW"}],"branch":"refs/heads/canon"}},"requirements":[{"status":"OK","fallback_text":"Code-Owners","type":"code-owners"}],"submit_records":[{"rule_name":"gerrit~PrologRule","status":"NOT_READY","labels":[{"label":"Autosubmit","status":"MAY"},{"label":"Conformant-Commit-Message","status":"OK","applied_by":{"_account_id":1000034,"name":"sterni","email":"sternenseemann@systemli.org","username":"sterni"}},{"label":"All-Comments-Resolved","status":"NEED"},{"label":"Verified","status":"OK","applied_by":{"_account_id":1000014,"name":"BuildkiteCI","username":"buildkite","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"NEED"}]},{"rule_name":"Code-Owners","status":"OK","requirements":[{"status":"OK","fallback_text":"Code-Owners","type":"code-owners"}]}],"submit_requirements":[{"name":"All-Comments-Resolved","status":"UNSATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:All-Comments-Resolved\u003dgerrit~PrologRule","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:All-Comments-Resolved\u003dgerrit~PrologRule"]}},{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dgerrit~PrologRule"],"failing_atoms":[]}},{"name":"Code-Owners","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"rule:Code-Owners","fulfilled":true,"status":"PASS","passing_atoms":["Code-Owners"],"failing_atoms":[]}},{"name":"Conformant-Commit-Message","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Conformant-Commit-Message\u003dgerrit~PrologRule","fulfilled":true,"status":"PASS","passing_atoms":["label:Conformant-Commit-Message\u003dgerrit~PrologRule"],"failing_atoms":[]}},{"name":"Code-Review","status":"UNSATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dgerrit~PrologRule","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dgerrit~PrologRule"]}}]}