GNU bug report logs - #77785
[PATCH] gnu: cura: prevent importing outside of store

Previous Next

Package: guix-patches;

Reported by: Jakob Kirsch <jakob.kirsch <at> web.de>

Date: Sun, 13 Apr 2025 16:30:02 UTC

Severity: normal

Tags: patch

To reply to this bug, email your comments to 77785 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#77785; Package guix-patches. (Sun, 13 Apr 2025 16:30:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Jakob Kirsch <jakob.kirsch <at> web.de>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Sun, 13 Apr 2025 16:30:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Jakob Kirsch <jakob.kirsch <at> web.de>
To: guix-patches <at> gnu.org
Subject: [PATCH] gnu: cura: prevent importing outside of store
Date: Sun, 13 Apr 2025 18:29:31 +0200
[Message part 1 (text/plain, inline)]
I've recently tried to run cura but it kept crashing because it couldn't find shared libraries.
As it turns out, python adds directories in the home directory to the search path and a pyqt5 installed by pip managed to be loaded, which obviously won't work.
This patch addresses this by adding a small snippet of code to the top of bin/cura that clears out all paths from sys.path that don't start with /gnu.
[0001-gnu-cura-prevent-importing-outside-of-store.patch (text/plain, attachment)]

Information forwarded to guix-patches <at> gnu.org:
bug#77785; Package guix-patches. (Sun, 13 Apr 2025 19:35:02 GMT) Full text and rfc822 format available.

Message #8 received at 77785 <at> debbugs.gnu.org (full text, mbox):

From: Nicolas Graves <ngraves <at> ngraves.fr>
To: Jakob Kirsch <jakob.kirsch <at> web.de>, 77785 <at> debbugs.gnu.org
Subject: Re: [bug#77785] [PATCH] gnu: cura: prevent importing outside of store
Date: Sun, 13 Apr 2025 21:34:38 +0200
On 2025-04-13 18:29, Jakob Kirsch via Guix-patches via wrote:

> I've recently tried to run cura but it kept crashing because it couldn't find shared libraries.
> As it turns out, python adds directories in the home directory to the search path and a pyqt5 installed by pip managed to be loaded, which obviously won't work.
> This patch addresses this by adding a small snippet of code to the top of bin/cura that clears out all paths from sys.path that don't start with /gnu.
> From f49e1297a0be295a7d47ebf33fe3e27ceecefefa Mon Sep 17 00:00:00 2001
> Message-ID: <f49e1297a0be295a7d47ebf33fe3e27ceecefefa.1744561640.git.jakob.kirsch <at> web.de>
> From: Jakob Kirsch <jakob.kirsch <at> web.de>
> Date: Sun, 13 Apr 2025 18:25:20 +0200
> Subject: [PATCH] gnu: cura: prevent importing outside of store

Hey, TY Jakob for working on that.

I'm in the process of trying to get Cura to build on the next
python-team branch (for the sake of python-team, I don't use Cura).

I'll apply the patch there and test with it.  Could I ping you to review
if the package works as expected once I'm done making the build pass on
python-team? 

-- 
Best regards,
Nicolas Graves




Information forwarded to guix-patches <at> gnu.org:
bug#77785; Package guix-patches. (Sun, 13 Apr 2025 21:06:01 GMT) Full text and rfc822 format available.

Message #11 received at 77785 <at> debbugs.gnu.org (full text, mbox):

From: Jakob Kirsch <jakob.kirsch <at> web.de>
To: Nicolas Graves <ngraves <at> ngraves.fr>
Cc: 77785 <at> debbugs.gnu.org
Subject: Re: [bug#77785] [PATCH] gnu: cura: prevent importing outside of store
Date: Sun, 13 Apr 2025 23:05:39 +0200
> I'm in the process of trying to get Cura to build on the next
> python-team branch (for the sake of python-team, I don't use Cura).
Thanks that's cool.

> I'll apply the patch there and test with it.  Could I ping you to review
> if the package works as expected once I'm done making the build pass on
> python-team?
Yeah sure.




This bug report was last modified 10 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.