From 14a8a474120ef4289625f05ba5d87fa9e9d19542 Mon Sep 17 00:00:00 2001 From: nsfisis Date: Thu, 6 Aug 2026 20:50:24 +0900 Subject: fix(php-rpc): carry the worker channel over a socketpair The transport bound an AF_UNIX path under TMPDIR and waited for the child to connect. That path has to fit in sun_path (108 bytes), so a deep TMPDIR made every worker spawn fail, and the bind(2) itself is denied under a sandbox. The parent now keeps one end of a socketpair and installs the other on descriptor 3 before exec, which the worker opens as php://fd/3. The pair is connected from the start, so the accept poll and its ten-second deadline are gone; a child that dies before reading surfaces as EOF on the first call, where worker_state already attaches its exit status. Co-Authored-By: Claude Opus 5 (1M context) --- crates/shirabe-php-rpc/Cargo.toml | 1 + 1 file changed, 1 insertion(+) (limited to 'crates/shirabe-php-rpc/Cargo.toml') diff --git a/crates/shirabe-php-rpc/Cargo.toml b/crates/shirabe-php-rpc/Cargo.toml index cb062e7d..e4675faa 100644 --- a/crates/shirabe-php-rpc/Cargo.toml +++ b/crates/shirabe-php-rpc/Cargo.toml @@ -9,6 +9,7 @@ shirabe-php-shim.workspace = true shirabe-php-src.workspace = true anyhow.workspace = true indexmap.workspace = true +nix.workspace = true tempfile.workspace = true [lints] -- cgit v1.3.1