Unverified Commit bc657814 authored by FlameFlag's avatar FlameFlag
Browse files

discord: don't leak bundled nss via `LD_LIBRARY_PATH`

Discord pins an older nss (currently 3.112.3) that is exported via
`LD_LIBRARY_PATH` and leaks to xdg-open's children

Discord's own ELF has libnss3.so in DT_NEEDED, so autoPatchelfHook
resolves it via rpath; LD_LIBRARY_PATH is not needed.

Fixes #514859
parent 7176fd71
Loading
Loading
Loading
Loading
+3 −1
Original line number Diff line number Diff line
@@ -151,7 +151,9 @@ let
      libxrender
      libxtst
      nspr
      nss
      # nss is intentionally NOT in libPath: it would leak via LD_LIBRARY_PATH
      # to xdg-open and break Firefox children when versions diverge (#514859,
      # PR #186603)
      libxcb
      libxkbcommon
      pango