[Bug dynamic-link/13823] Bogus LD_AUDIT can cause target binary to segfault

[carlos at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=13823

Carlos O'Donell <carlos at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.29

--- Comment #5 from Carlos O'Donell <carlos at redhat dot com> ---
$ LD_AUDIT=/blah /bin/true
ERROR: ld.so: object '/blah' cannot be loaded as audit interface: cannot open
shared object file; ignored.

The error messages were reorganized and fixed up by Florian in 2019.

commit 3b856d093f5197637a5927c37d6c07dad8c86d45
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Feb 12 13:36:56 2019 +0100

    elf: Ignore LD_AUDIT interfaces if la_version returns 0 [BZ #24122]

    This change moves the audit module loading and early notification into
    separate functions out of dl_main.

    It restores the bug fix from commit
    8e889c5da3c5981c5a46a93fec02de40131ac5a6  ("elf: Fix LD_AUDIT for
    modules with invalid version (BZ#24122)") which was reverted in commit
    83e6b59625f45db1eee93e5684091f740c52a083  ("[elf] Revert 8e889c5da3
    (BZ#24122)").

    The actual bug fix is the separate error message for the case when
    la_version returns zero.  The dynamic linker error message (which is
    NULL in this case) is no longer used.  Based on the intended use of
    version zero (ignore this module due to explicit request), the message
    is only printed if debugging is enabled.

I'm considering this fixed in glibc 2.29.

-- 
You are receiving this mail because:
You are on the CC list for the bug.