sounds reasonable to me. I would suggest to open an issue on
GitHub because it makes it easier to keep track.
dear pd devs,
I have a Max object (o.luajit) which wraps Luajit that I’d
like to port to Pd but it appears that since Pd does not ship
with the entitlement "com.apple.security.cs.allow-jit” Luajit
crashes when using JIT compilation.
After some debugging (with helpful AI assistance) to analyze
the crash report, I was able to isolate the issue to the JIT
compiler memory allocation, and found that Luajit crashes Pd
when the JIT computation is triggered crossing some kind of size
threshold. The application is terminated with a “Code Signature
Invalid” sigkill (details pasted below) due to missing the
entitlement to run (or generate?) JIT code.
If I manually disable JIT in the lua code the crash goes away
(but then of course you loose the speed benefits of Luajit).
As an experiment, I added:
<key>com.apple.security.cs.allow-jit</key>
<true
/>
to the /pure-data/mac/stuff/pd.entitlements file, and built
the Pd.app via “make app”.
finally with addition of this entitlement the Luajit JIT
processing works as expected, which is great!
so, to conclude, a feature request: would it be possible to
add the com.apple.security.cs.allow-jit entitlement for the Pd
Mac releases? I could imagine this would be useful in the
future for others development projects as well.
all the best,
rama
p.s. here’s what the crash looks like:
Crashed Thread: 0 Dispatch queue:
com.apple.main-thread
Exception Type: EXC_BAD_ACCESS (SIGKILL (Code
Signature Invalid))
Exception Codes: UNKNOWN_0x32 at 0x0000000102793f7c
Exception Codes: 0x0000000000000032,
0x0000000102793f7c
Termination Reason: Namespace CODESIGNING, Code 2
Invalid Page
p.p.s. in case it it helpful for reference, here are the
Max.app entitlements which includes the allow-jit key.
codesign
-d --entitlements - /Applications/Max.app
Executable=/Applications/Max.app/Contents/MacOS/Max
[Dict]
[Key]
com.apple.security.automation.apple-events
[Value]
[Bool]
true
[Key]
com.apple.security.cs.allow-jit
[Value]
[Bool]
true
[Key]
com.apple.security.cs.allow-unsigned-executable-memory
[Value]
[Bool]
true
[Key]
com.apple.security.cs.disable-library-validation
[Value]
[Bool]
true
[Key]
com.apple.security.device.audio-input
[Value]
[Bool]
true
[Key]
com.apple.security.device.camera
[Value]
[Bool]
true
[Key]
com.apple.security.get-task-allow
[Value]
[Bool]
true
---
pd-dev@lists.iem.at - the Pd developers' mailinglist
https://lists.iem.at/hyperkitty/list/pd-dev@lists.iem.at/message/NHTPOPYIVKU6JR7HS7ZF2Q5USIVVQSU6/
