Skip to content

Fix bundled SQLite CVEs (rusqlite 0.34) and LMDB EINVAL failures on macOS #2103

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
erubboli wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Fix bundled SQLite CVEs (rusqlite 0.34) and LMDB EINVAL failures on macOS #2103

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
be919bf
Bump rusqlite to 0.34 for bundled SQLite 3.49.1
erubboli Aug 22, 2026
a554e07
Use POSIX mutexes for LMDB on macOS
erubboli Aug 22, 2026
f084e05
Update h2 to 0.4.18 (RUSTSEC-2026-0258)
erubboli Aug 22, 2026
668ef88
Update cargo-vet imports.lock for h2/rusqlite/libsqlite3-sys bumps
erubboli Aug 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .cargo/config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,18 @@ linker = "aarch64-linux-gnu-gcc"

[target.x86_64-pc-windows-msvc]
rustflags = ["-C", "target-feature=+crt-static"]

# Force lmdb-sys (lmdb-mintlayer fork) to use POSIX mutexes instead of System V
# semaphores on macOS. Darwin's default SysV backend fails with EINVAL once a
# process holds locks on more than `kern.sysv.semume` (=10) semaphore sets
# concurrently, which breaks any workload opening multiple DB environments in
# one process (e.g. the storage-lmdb test suite).
#
# MDB_USE_ROBUST must be 0 because Darwin does not implement robust mutexes
# (no PTHREAD_MUTEX_ROBUST); the cost is that a process crash while holding an
# env lock can leave other processes deadlocked on that environment.
# These flags are only applied when compiling FOR apple targets, so Linux/CI
# builds keep upstream defaults (robust glibc pthread mutexes).
[env]
CFLAGS_aarch64-apple-darwin = "-DMDB_USE_POSIX_MUTEX=1 -DMDB_USE_ROBUST=0"
CFLAGS_x86_64-apple-darwin = "-DMDB_USE_POSIX_MUTEX=1 -DMDB_USE_ROBUST=0"
34 changes: 17 additions & 17 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -235,7 +235,7 @@ ripemd = "0.1"
rlimit = "0.10"
rstest = "0.24"
rstest_reuse = "0.7"
rusqlite = "0.33"
rusqlite = "0.34"
schnorrkel = "0.11"
secp256k1 = { version = "0.29", default-features = false }
semver = "1.0"
Expand Down
12 changes: 6 additions & 6 deletions supply-chain/imports.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -665,8 +665,8 @@ user-id = 55123
user-login = "rust-lang-owner"

[[publisher.h2]]
version = "0.4.13"
when = "2026-01-05"
version = "0.4.18"
when = "2026-08-20"
user-id = 359
user-login = "seanmonstar"
user-name = "Sean McArthur"
Expand Down Expand Up @@ -954,8 +954,8 @@ user-id = 55123
user-login = "rust-lang-owner"

[[publisher.libsqlite3-sys]]
version = "0.31.0"
when = "2025-01-19"
version = "0.32.0"
when = "2025-03-05"
user-id = 5062
user-login = "gwenn"
user-name = "gwenn"
Expand Down Expand Up @@ -1380,8 +1380,8 @@ user-login = "yoshuawuyts"
user-name = "Yosh"

[[publisher.rusqlite]]
version = "0.33.0"
when = "2025-01-19"
version = "0.34.0"
when = "2025-03-05"
user-id = 5062
user-login = "gwenn"
user-name = "gwenn"
Expand Down
Loading