Bug 6610 – NSS modules should be dlopen()ed with RTLD_DEEPBIND

Bug 6610 - NSS modules should be dlopen()ed with RTLD_DEEPBIND


Summary:	NSS modules should be dlopen()ed with RTLD_DEEPBIND

Status:	RESOLVED WONTFIX

Product:	glibc
Classification:	Unclassified
Component:	libc
Version:	unspecified

Importance:	P2 normal
Target Milestone:	---
Assigned To:	Ulrich Drepper

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2008-06-09 18:33 UTC by Petr Baudis
Modified:	2010-06-11 14:01 UTC (History)
CC List:	2 users (show)

See Also:
Host:
Target:
Build:
Last reconfirmed:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Petr Baudis 2008-06-09 18:33:37 UTC

nss/nsswitch.c should dlopen() the NSS modules with RTLD_DEEPBIND so that the
application symbols will not interfere with symbols the NSS module is using.

A practical example (pointed out by Michael Meeks) is nss_ldap + Thunderbird
failing, since both use incompatible LDAP libraries with some symbols clashing;
nss_ldap will use the Thunderbird LDAP library symbols in preference to these of
its own library, resulting in a crash. Deepbinding should solve this problem,
and I can think of no bad side-effects (in sane situations).

Comment 1 Mike Frysinger 2008-12-29 20:44:20 UTC

i tried merging this into the Gentoo glibc package, but things went badly for
mozilla users.  feel like having a look ?

http://bugs.gentoo.org/252302

Comment 2 Petr Baudis 2010-06-11 14:01:50 UTC

By now, plenty of bad side-effects popped up mainly due to the fact that custom
malloc() overrides do not work - the NSS module will ignore them, but will try
to free() pointers allocated by glibc using the overriden malloc(). It's
probably best to require NSS modules not to pollute namespace.