chromium: fix read out of range on aarch64 16k pages builds

[zvolin]

This fixes an issue introduced in chromium 131 which results in out of range memory reads on 16k pages systems.

Revert v8 change. Here it was done for fedora asahi remix.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[zvolin]

Posting the log indicating the issue for easier googling:

ERROR:process_memory_range.cc(75)] read out of range

[zvolin]

I've built that and it seems to fix og issue with tabs crashing, but now I can no longer play yt videos. Gonna check this further before undraft

[reinthal]

This PR is important as chromium based browsers the only way for me (and possibly all mac asahi nix users) to use progressive web apps like Slack for communication. Blocking nixos as daily driver.

[networkException]

Additional context: https://social.treehouse.systems/@marcan/113656361610223289

[zvolin]

Alright, tested youtube and slack huddles and everything works, undrafting.
I think my issue with youtube was with the sound handling as I was testing before with nix run .#chromium in nixpkgs rather than by including chromium in my nixos config, which applies asahi overlay magic with sound drivers etc.

[networkException]

Very nice, thank you

[nixpkgs-ci]

Successfully created backport PR for release-24.11:

• [Backport release-24.11] chromium: fix read out of range on aarch64 16k pages builds #366033

[sayidabyan]

Hello, I'm not familiar with how this works, but does this mean all the other Chromium-based browsers, such as Brave, need to be patched as well? Thank you.

[networkException]

Yes, unless patched by their respective upstream, this problem affects all chromium based browsers. As far as nixpkgs goes only chromium and ungoogled-chromium are built from source. Google Chrome for example couldn't be patched because its proprietary

[reinthal]

@sayidabyan For brave (and any other chromium based browser) you can still bypass this option using the following command when launching the app from commandline

brave --js-flags=--no-decommit-pooled-pages

see this discussion nix-community/nixos-apple-silicon#259