dyld: Symbol not found: ___CFObjCIsCollectable #45042

kirelagin · 2018-08-14T21:16:59Z

This happens on macOS Mojave 10.14:

{-# LANGUAGE OverloadedStrings #-}

import Control.Monad
import Data.Default.Class
import Network.HTTP.Req

main :: IO ()
main = runReq def $
  void $ req GET (https "api.github.com" /: "meta") NoReqBody ignoreResponse mempty

› nix-shell -p 'haskellPackages.ghcWithPackages (hp: [ hp.req ])' --run 'runhaskell Main.hs'
dyld: Symbol not found: ___CFObjCIsCollectable
  Referenced from: /nix/store/wkqjqwyfi1nn2hg9k0as03lpcmalqxzj-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
  Expected in: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
 in /nix/store/wkqjqwyfi1nn2hg9k0as03lpcmalqxzj-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
Main.hs: VanillaHttpException (HttpExceptionRequest Request {
  host                 = "api.github.com"
  port                 = 443
  secure               = True
  requestHeaders       = []
  path                 = "/meta"
  queryString          = ""
  method               = "GET"
  proxy                = Nothing
  rawBody              = False
  redirectCount        = 10
  responseTimeout      = ResponseTimeoutDefault
  requestVersion       = HTTP/1.1
}
 (InternalException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa)))))

(the expected result is a 403.)

I am not sure if it is a Mojave-specific issue as I currently don’t have a previous version of macOS to test with, but I’ll ping #42719 just in case.

The text was updated successfully, but these errors were encountered:

kirelagin · 2018-08-14T21:31:39Z

› objdump /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation -macho -exports-trie | grep ___CFObjCIsCollectable
0x00594E50  ___CFObjCIsCollectable

🤔

LnL7 · 2018-08-14T22:03:22Z

Hmm, I was expecting this to be the problem but that doesn't seem to be it. I was expecting our version not to have it while libsecurity is expecting it to be there.

$ nm -g /nix/store/36ph03q316x86rdyvx63ha2kl51f84dm-CF-osx-10.10.5/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation | grep ___CFObjCIsCollectable
00000000000f6970 S ___CFObjCIsCollectable
$ nm -g /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation | grep ___CFObjCIsCollectable
00000000005e68d0 S ___CFObjCIsCollectable

kirelagin · 2018-08-14T22:38:05Z

Got access to macOS 10.13.6 and it works there, so, yes, a Mojave regression.

jhenahan · 2018-09-16T04:57:02Z

EDITED: Nevermind that. I understand more about how all these libraries get instantiated, now.

Also hitting this on the latest Mojave beta.

jhenahan · 2018-09-23T02:57:31Z

Due to a suggestion at

nixpkgs/doc/functions.xml

Line 636 in 7736337

If you see errors similar to <literal>Error_Protocol ("certificate has

about this specific error message, I'm attempting a GHC build with cacert added to nativeBuildInputs to see if that gets things any further along. Will update if/when it finishes.

Update: No dice. Same ___CFObjCIsCollectable, same error about unknown CA.

cransom · 2018-09-25T18:08:57Z

I tried to follow the story here and I didn't see a resolution, so I assume this is still broken. I'm on the current bleeding master and trying to build haskellPackages.dhall_1_17_0 and I'm stumbling into this as well:

/private/tmp/nix-build-dhall-1.17.0.drv-0/dhall-1.17.0/src/Dhall/Tutorial.hs:440: failure in expression `input auto "https://raw.githubusercontent.com/dhall-lang/dhall-haskell/18e4e9a18dc53271146df3ccf5b4177c3552236b/examples/True" :: IO Bool'
expected: True
 but got: dyld: Symbol not found: ___CFObjCIsCollectable
            Referenced from: /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
            Expected in: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
           in /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
          dyld: Symbol not found: ___CFObjCIsCollectable
            Referenced from: /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
            Expected in: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
           in /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
<snip>

Darwin is greek to me, but from the previous commands, it looks like the symbol isn't copied or at least is undefined?

0caseys-imac:~/git/nixpkgs% nm -g /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib | grep ___CFObjCIsCollectable
                 U ___CFObjCIsCollectable
0caseys-imac:~/git/nixpkgs% nm -g /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation | grep ___CFObjCIsCollectable
0000000000595e60 S ___CFObjCIsCollectable

This would seem to line up with @LnL7's theory from #45042 (comment)

jhenahan · 2018-09-27T17:29:49Z

@cransom For the immediate problem of dhall, you can override it with dontCheck to skip the tests. Network calls still won't work, but it'll at least be usable.

dhall = dontCheck super.dhall_1_17_0;

matthewbauer · 2018-09-27T19:01:03Z

I think we should try using the impure Security framework for now. I looked at the issue and it's definitely not obvious what to do. Perhaps updating to the latest Apple open source release fixes it but just as likely could be something else.

/cc @copumpkin @pikajude

domenkozar · 2018-09-27T22:09:53Z

Unless Apple has a separate channel for alphas/betas, we have the latest version from https://opensource.apple.com/tarballs/libsecurity_utilities/

matthewbauer · 2018-09-27T22:51:57Z

They’ve moved it all to security. Those are from like 10.9

domenkozar · 2018-09-28T14:23:05Z

@copumpkin @LnL7 any objections removing libsecurity_utlities in favor of impure Security?

eyeinsky · 2018-10-02T12:20:42Z

Is this unresolved as of now?

This is my error (calling googleapis through wreq/http-client:

dyld: Symbol not found: ___CFObjCIsCollectable
  Referenced from: /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
  Expected in: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
 in /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
dyld: Symbol not found: ___CFObjCIsCollectable
  Referenced from: /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
  Expected in: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
 in /nix/store/79x43vkf7r0hhyd7h6xy7kipyv9j5kj8-libsecurity_utilities-osx-10.7.5/lib/libsecurity_utilities.0.dylib
HttpExceptionRequest Request {
  host                 = "www.googleapis.com"
  port                 = 443
  secure               = True
  requestHeaders       = [("Content-Type","application/x-www-form-urlencoded"),("User-Agent","haskell wreq-0.5.2.1")]
  path                 = "/oauth2/v3/tokeninfo"
  queryString          = ""
  method               = "POST"
  proxy                = Nothing
  rawBody              = False
  redirectCount        = 10
  responseTimeout      = ResponseTimeoutDefault
  requestVersion       = HTTP/1.1
}
 (InternalException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa))))

Strange that there is a "dyld symbol not found" error, and then "certificate has unknown CA".

matthewbauer · 2018-10-02T18:16:04Z

I opened #47676 to fix this (temporarily at least).

eyeinsky · 2018-10-02T20:03:49Z

@matthewbauer thank you for doing this!

@copumpkin

darwin.security_tool is currently broken in Mojave. See issue NixOS#45042 for more info. Our security_tool stuff comes from 10.9 so I suspect that it needs an update. Here I am putting in a hack to get things working again. This uses the system provided security binary at /usr/bin/security to avoid the issue in Haskell’s x509-system package. Unfortunately, this will break with the sandbox. I am also working on a proper fix, but this requires updating lots of Apple stuff (and also copumpkin’s new CF). You can follow the progress on this branch: https://github.com/matthewbauer/nixpkgs/tree/xcode-security This commit should be backported to release-18.03 and release-18.09. /cc @copumpkin @LnL7 @pikajude

@copumpkin

darwin.security_tool is currently broken in Mojave. See issue #45042 for more info. Our security_tool stuff comes from 10.9 so I suspect that it needs an update. Here I am putting in a hack to get things working again. This uses the system provided security binary at /usr/bin/security to avoid the issue in Haskell’s x509-system package. Unfortunately, this will break with the sandbox. I am also working on a proper fix, but this requires updating lots of Apple stuff (and also copumpkin’s new CF). You can follow the progress on this branch: https://github.com/matthewbauer/nixpkgs/tree/xcode-security This commit should be backported to release-18.03 and release-18.09. /cc @copumpkin @LnL7 @pikajude

@copumpkin

darwin.security_tool is currently broken in Mojave. See issue #45042 for more info. Our security_tool stuff comes from 10.9 so I suspect that it needs an update. Here I am putting in a hack to get things working again. This uses the system provided security binary at /usr/bin/security to avoid the issue in Haskell’s x509-system package. Unfortunately, this will break with the sandbox. I am also working on a proper fix, but this requires updating lots of Apple stuff (and also copumpkin’s new CF). You can follow the progress on this branch: https://github.com/matthewbauer/nixpkgs/tree/xcode-security This commit should be backported to release-18.03 and release-18.09. /cc @copumpkin @LnL7 @pikajude

copumpkin · 2018-10-09T18:38:57Z

@domenkozar no objections

Ekleog · 2018-10-18T01:12:32Z

(triage) If I read it correctly, this is currently solved by #47676?

matthewbauer · 2018-10-18T01:13:31Z

Yeah as well as we can until we can update Security.

LnL7 added the 6.topic: darwin Running or building packages on Darwin label Aug 14, 2018

This was referenced Sep 27, 2018

darwin: fix Libsystem compatibility for macOS 10.14 #43140

Merged

Broken on macOS mojave cachix/cachix#134

Closed

domenkozar added the 0.kind: bug Something is broken label Sep 27, 2018

matthewbauer mentioned this issue Oct 2, 2018

haskell: fix x509-system on mojave #47676

Merged

matthewbauer closed this as completed Oct 18, 2018

thedavidmeister mentioned this issue Nov 17, 2018

state of nix-shell on mac os X holochain/holochain-rust#632

Closed

toonn mentioned this issue Apr 24, 2024

Darwin build failure: elmPackage.elm #297775

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

dyld: Symbol not found: ___CFObjCIsCollectable #45042

dyld: Symbol not found: ___CFObjCIsCollectable #45042

kirelagin commented Aug 14, 2018

kirelagin commented Aug 14, 2018 •

edited

Loading

LnL7 commented Aug 14, 2018

kirelagin commented Aug 14, 2018

jhenahan commented Sep 16, 2018 •

edited

Loading

jhenahan commented Sep 23, 2018 •

edited

Loading

cransom commented Sep 25, 2018

jhenahan commented Sep 27, 2018

matthewbauer commented Sep 27, 2018 •

edited

Loading

domenkozar commented Sep 27, 2018

matthewbauer commented Sep 27, 2018

domenkozar commented Sep 28, 2018

eyeinsky commented Oct 2, 2018

matthewbauer commented Oct 2, 2018

eyeinsky commented Oct 2, 2018

copumpkin commented Oct 9, 2018

Ekleog commented Oct 18, 2018

matthewbauer commented Oct 18, 2018

dyld: Symbol not found: ___CFObjCIsCollectable #45042

dyld: Symbol not found: ___CFObjCIsCollectable #45042

Comments

kirelagin commented Aug 14, 2018

kirelagin commented Aug 14, 2018 • edited Loading

LnL7 commented Aug 14, 2018

kirelagin commented Aug 14, 2018

jhenahan commented Sep 16, 2018 • edited Loading

jhenahan commented Sep 23, 2018 • edited Loading

cransom commented Sep 25, 2018

jhenahan commented Sep 27, 2018

matthewbauer commented Sep 27, 2018 • edited Loading

domenkozar commented Sep 27, 2018

matthewbauer commented Sep 27, 2018

domenkozar commented Sep 28, 2018

eyeinsky commented Oct 2, 2018

matthewbauer commented Oct 2, 2018

eyeinsky commented Oct 2, 2018

copumpkin commented Oct 9, 2018

Ekleog commented Oct 18, 2018

matthewbauer commented Oct 18, 2018

kirelagin commented Aug 14, 2018 •

edited

Loading

jhenahan commented Sep 16, 2018 •

edited

Loading

jhenahan commented Sep 23, 2018 •

edited

Loading

matthewbauer commented Sep 27, 2018 •

edited

Loading