> Looks like that's not enough, I happened to look at the screen at
> just the right time and noticed some undefined symbol errors from ld.lld
> relating to dav1d scrolling past while it was building.
> 
> Next attempt is with this diff, results in the morning probably.

oh, build was quicker than I'm used to!

with this + the kern_pledge.c diff, I still get a SIGILL though
(trapno=33554432). no firefox.core though, is there an easy way to
stop the kernel from allowing firefox to trap SIGILL?

$ aarch64-esr-decoder `moo 33554432 | head -1`
ESR 0x00000000000000000000000002000000:
37..63 RES0: 0x0000000 0b000000000000000000000000000
32..36 ISS2: 0x00 0b00000
26..31 EC: 0x00 0b000000
  # Unknown reason
25     IL: true
  # 32-bit instruction trapped
00..24 ISS: 0x0000000 0b0000000000000000000000000
  00..24 RES0: 0x0000000 0b0000000000000000000000000
    # ISS is RES0


> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/www/mozilla-firefox/Makefile,v
> diff -u -p -r1.603 Makefile
> --- Makefile	17 Sep 2024 12:55:40 -0000	1.603
> +++ Makefile	23 Sep 2024 22:58:41 -0000
> @@ -1,6 +1,8 @@
>  COMMENT =	Firefox web browser
>  ONLY_FOR_ARCHS =	amd64 aarch64 riscv64
>  
> +REVISION =		0
> +
>  # Don't forget to bump www/firefox-i18n after updates.
>  
>  MOZILLA_VERSION =	130.0.1
> @@ -74,6 +76,12 @@ COMMENT_FFVPX ?=
>  COMMENT_FFVPX =		@comment # needs a trailing space
>  .endif
>  SUBST_VARS +=		COMMENT_FFVPX
> +
> +# vendored copy of dav1d needs patching
> +USE_NOBTCFI-aarch64 =	Yes
> +.if ${MACHINE_ARCH} == aarch64
> +USE_WXNEEDED =		Yes
> +.endif
>  
>  post-install:
>  	${SUBST_MAN} ${FILESDIR}/mozilla-firefox.1 \
>