lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <d7003b6e-b8e3-41c4-9e6e-2b9abd0c5572@gmail.com>
Date: Tue, 21 May 2024 11:54:41 -0400
From: Andrew Udvare <audvare@...il.com>
To: linux-kernel@...r.kernel.org, io-uring@...r.kernel.or
Cc: regressions@...r.kernel.org
Subject: BUG: ETXTBSY when running Yarn (Node) since af5d68f

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=af5d68f8892f8ee8f137648b79ceb2abc153a19b

Since the above commit present in 6.9+, Node running a Yarn installation 
that executes a subprocess always shows the following:

/test # yarn --offline install
yarn install v1.22.22
warning package.json: "test" is also the name of a node core module
warning test@....0: "test" is also the name of a node core module
[1/4] Resolving packages...
[2/4] Fetching packages...
[3/4] Linking dependencies...
[4/4] Building fresh packages...
error /test/node_modules/snyk: Command failed.
Exit code: 126
Command: node wrapper_dist/bootstrap.js exec
Arguments:
Directory: /test/node_modules/snyk
Output:
/bin/sh: node: Text file busy

The commit was found by bisection with a simple initramfs that just runs 
'yarn --offline install' with a test project and cached Yarn packages.

To reproduce:

npm install -g yarn
mkdir test
cd test
cat > package.json <<EOF
{
   "name": "test",
   "version": "1.0.0",
   "main": "index.js",
   "license": "MIT",
   "dependencies": {
     "snyk": "^1.1291.0"
   }
}
EOF
yarn install

Modern Yarn will give the same result but with slightly different output.

This also appears to affect node-gyp: 
https://github.com/nodejs/node/issues/53051

See also: https://bugs.gentoo.org/931942

--
Andrew

Download attachment "OpenPGP_signature.asc" of type "application/pgp-signature" (841 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ