[Bug dynamic-link/19773] replacing .so which was opened and closed, leads to segfault on next dlopen/dlsym

fweimer at redhat dot com sourceware-bugzilla@sourceware.org
Thu Mar 10 16:00:00 GMT 2016


https://sourceware.org/bugzilla/show_bug.cgi?id=19773

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |fweimer at redhat dot com
         Resolution|---                         |INVALID
              Flags|                            |security-

--- Comment #4 from Florian Weimer <fweimer at redhat dot com> ---
There may be two separate issues here:

If the file backing a mapping is truncated, accessing the truncated part of the
mapping will result in SIGBUS.  This is probably not the case here because the
signal you report is SIGSEGV, not SIGBUS.

dlopen (and the rest of the dynamic linker) does not verify internal
consistency of ELF files.  This is a deliberate design decision, to improve
performance.  As a result, unmapped memory can be accessed if the file size
does not match expectations.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list