Skip to content

[3.14] gh-144942: Link $(MODLIBS) into the macOS shared library and framework (GH-159966) - #160160

Merged
itamaro merged 1 commit into
python:3.14from
miss-islington:backport-03864a2-3.14
Oct 22, 2026
Merged

itamaro merged 1 commit into
python:3.14from
miss-islington:backport-03864a2-3.14

Conversation

@miss-islington

@miss-islington miss-islington commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

The rules that link libpython$(LDVERSION).dylib and the macOS and iOS frameworks don't pass $(MODLIBS), unlike the libpython$(LDVERSION).so rule. When a module is built in, for example via Modules/Setup.local, the libraries that module needs are left out:

  • --enable-framework: the build fails with undefined symbols.
  • --enable-shared: the dylib is linked with -undefined dynamic_lookup, so the build succeeds and the failure only shows up at runtime.

To reproduce, build on macOS with this Modules/Setup.local:

*static*
_blake2 blake2module.c

On main:

  • --enable-framework: linking Python.framework fails with 12 undefined _Py_LibHacl_* symbols.
  • --enable-shared: nm -u libpython3.16.dylib lists the same 12 symbols. After make install, python3 -c "import _blake2; _blake2.blake2b(b'abc')" aborts with dyld: missing symbol called, and so does a C program that embeds Python.

With this change, both builds link with no undefined HACL symbols, and _blake2 works as a built-in module. In default builds $(MODLIBS) is empty, so they are unaffected. test_hashlib, test_hmac, test_embed and test_sysconfig pass for shared and framework builds, both with and without the Setup.local above (macOS 14, arm64). I haven't tested the iOS framework rule, which gets the same one-line change.

python-build-standalone already carries the dylib part of this as a patch (astral-sh/python-build-standalone#870). This PR doesn't remove -undefined dynamic_lookup, as the earlier gh-145186 did.
(cherry picked from commit 03864a2)

Co-authored-by: Itamar Oren itamarost@gmail.com

…framework (pythonGH-159966)

The rules that link `libpython$(LDVERSION).dylib` and the macOS and iOS frameworks don't pass `$(MODLIBS)`, unlike the `libpython$(LDVERSION).so` rule. When a module is built in, for example via `Modules/Setup.local`, the libraries that module needs are left out:

- **`--enable-framework`:** the build fails with undefined symbols.
- **`--enable-shared`:** the dylib is linked with `-undefined dynamic_lookup`, so the build succeeds and the failure only shows up at runtime.

To reproduce, build on macOS with this `Modules/Setup.local`:

```
*static*
_blake2 blake2module.c
```

On `main`:

- **`--enable-framework`:** linking `Python.framework` fails with 12 undefined `_Py_LibHacl_*` symbols.
- **`--enable-shared`:** `nm -u libpython3.16.dylib` lists the same 12 symbols. After `make install`, `python3 -c "import _blake2; _blake2.blake2b(b'abc')"` aborts with `dyld: missing symbol called`, and so does a C program that embeds Python.

With this change, both builds link with no undefined HACL symbols, and `_blake2` works as a built-in module. In default builds `$(MODLIBS)` is empty, so they are unaffected. `test_hashlib`, `test_hmac`, `test_embed` and `test_sysconfig` pass for shared and framework builds, both with and without the `Setup.local` above (macOS 14, arm64). I haven't tested the iOS framework rule, which gets the same one-line change.

python-build-standalone already carries the dylib part of this as a patch ([astral-sh/python-build-standalone#870](astral-sh/python-build-standalone#870)). This PR doesn't remove `-undefined dynamic_lookup`, as the earlier pythongh-145186 did.
(cherry picked from commit 03864a2)

Co-authored-by: Itamar Oren <itamarost@gmail.com>
@itamaro
itamaro merged commit 313c817 into python:3.14 Oct 22, 2026
47 checks passed
@miss-islington
miss-islington deleted the backport-03864a2-3.14 branch October 22, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants