12 years on, #OpenBSD's port of #nginx still maintains its default chroot(2) patch. https://raw.githubusercontent.com/rnagy/nginx_chroot_patch/master/nginx-1.30.0-chroot.patch Reyk Floeter attemped to clean up nginx, wrote a large patch replacing all risky malloc calls w/ reallocarray(3), but upstream gave no indication they would accept, it was eventually discarded due to difficulty maintaining it. https://www.openbsd.org/papers/httpd-asiabsdcon2015.pdf After ~3 years in base, & the subsequent discovery of multiple "Heartbleed accelerating custom allocators", ngnix had outlived & outgrew its welcome.