Skip to content

Added null checks to dynamic store APIs - #59

Merged
dlon merged 2 commits into
mullvad:mainfrom
aw-cf:dynamicstore_null_checks
Sep 18, 2025
Merged

dlon merged 2 commits into
mullvad:mainfrom
aw-cf:dynamicstore_null_checks

Conversation

@aw-cf

@aw-cf aw-cf commented Aug 26, 2024 •

Copy link
Copy Markdown
Contributor

We noticed crashes due to missing null checks in dynamic_store.rs.

Additional background:
SCDynamicStoreCreate / SCDynamicStoreCreateWithOptions can return null. The returned value is currently passed to wrap_under_create_rule without a null check, which leads to an assertion error (Attempted to create a NULL object).

This PR adds additional checks and modifies affected APIs to return an Option instead.


This change is Reviewable

@dlon
dlon force-pushed the dynamicstore_null_checks branch from 84cd925 to b0c5883 Compare September 18, 2025 17:12
@dlon
dlon force-pushed the dynamicstore_null_checks branch from b0c5883 to d525d2a Compare September 18, 2025 17:14
@dlon
dlon merged commit de5966a into mullvad:main Sep 18, 2025
7 checks passed
@dlon

dlon commented Sep 18, 2025

Copy link
Copy Markdown
Member

Thank you and sorry about the incredibly late response

@konstin

konstin commented Nov 12, 2025

Copy link
Copy Markdown

Could I kindly ask for a new release with this fix?

@zanieb

zanieb commented Dec 1, 2025

Copy link
Copy Markdown

Could I ask again for a release here? We're continuing to get reports of this panic in uv.

@MarkusPettersson98

Copy link
Copy Markdown

Could I ask again for a release here? We're continuing to get reports of this panic in uv.

I'll try to cut a release later today!

@MarkusPettersson98 MarkusPettersson98 mentioned this pull request Dec 2, 2025
iamimsy pushed a commit to mimsy/volute that referenced this pull request Apr 2, 2026
Codex's native seatbelt sandbox panics on macOS due to an unpatched
bug in the system-configuration Rust crate (mullvad/system-configuration-rs#59).
The Anthropic sandbox-runtime also can't wrap codex processes because it
blocks Mach IPC services the Codex binary needs.

Switch codex template from sandboxMode "workspace-write" to
"danger-full-access" and document the limitation across deployment
docs, setup docs, and CLAUDE.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants