As jtt found when testing my zizmor port, aws-lc-sys is not xonly clean on amd64 and the s2n asm needs a lot of patching nowadays:
https://github.com/awslabs/s2n-bignum/pull/242 The funny thing is that I was aware of this at some point since I wrote patches for deno, but I completely forgot. I guess I'm getting old... Anyway: take the easy way out and use noexeconly on amd64. arm64 is fine and there's currently no riscv64 asm. Repro on modern enough amd64 (needs PKU in the cpu0 line): $ mkdir test && cd test && uv init && uv add kyber # segfault PS: Not a good moment to change this, but why do we have -arch suffixes for USE_NOBTCFI but not USE_NOEXECONLY? Index: Makefile =================================================================== RCS file: /cvs/ports/devel/uv/Makefile,v diff -u -p -r1.28 Makefile --- Makefile 9 Apr 2026 11:41:52 -0000 1.28 +++ Makefile 9 Apr 2026 19:38:56 -0000 @@ -1,12 +1,19 @@ # ring-v0.17 does not support this arch NOT_FOR_ARCHS = sparc64 +# aws-lc-sys 0.36 has constants in .text +# https://github.com/awslabs/s2n-bignum/pull/242 +.if ${MACHINE_ARCH} == "amd64" +USE_NOEXECONLY = Yes +.endif + COMMENT = Python package and project manager MODPY_DISTV = 0.11.5 GH_ACCOUNT = astral-sh GH_PROJECT = uv GH_TAGNAME = ${MODPY_DISTV} +REVISION = 0 CATEGORIES = devel
