527557 - On Linux, always build NSS with FREEBL_NO_DEPEND=1

Status: RESOLVED DUPLICATE of bug 497251

(NSS :: Libraries, defect)

Description

[Kai Engert (:KaiE:)]

After the recent Firefox issue with flash, having NSS libraries installed on Linux system where the glibc library requires libfreebl3's lowlevel hashing interfaces, this bug proposes:

On Linux, always build NSS with FREEBL_NO_DEPEND=1 (by default)

Comment 1

[Karl Tomlinson (:karlt)]

This doesn't seem to be the right solution to me.
I think a better solution would be to always provide NSSLOWHASH regardless of the value of FREEBL_NO_DEPEND.

From bug 497251 comment 81:

Currently FREEBL_NO_DEPEND looks like it controls two different features.

1) Enables the new NSSLOWHASH functionality.

2) Enables on-demand loading of nspr4 and nssutil3.

Although these features are currently coupled, it doesn't look like they need
to be.  IIUC only the second feature needs to have the
(possibly-recent-)Linux-dependency.

If the FREEBL_NO_DEPEND environment variable controlled only the second feature
then the ABI could be consistent wrt configuration.

Comment 2

[Wan-Teh Chang]

This bug is a duplicate of bug 497251.

I agree with Karl's observation.

Comment 3

[Kai Engert (:KaiE:)]

I don't mind marking this as a duplicate.

I had incorrectly assumed that bug 497251 was a firefox-bug, and a separate NSS bug would be needed. I was wrong, bug 497251 is already a NSS component bug.

I like Karl's proposal, but I believe it requires additional careful changes made by NSS developers, probably by Bob Relyea, who worked on this feature initially.

I guess it's a quicker path to success to always build with FREEBL_NO_DEPEND on Linux, and try to implement Karl's proposal in a separate step.