[PATCH] Define secure_getenv (v2)

[Florian Weimer]

I think I've incorporated the feedback so far.  Static linking indeed 
helps to run the test case.  Not sure if I should make it an xtest, but 
supplementary groups are very common.

The libc symbol situation looks like this now:

    612: 0000000000037930    27 FUNC    GLOBAL DEFAULT   12
         __libc_secure_getenv@@GLIBC_PRIVATE
    852: 0000000000037930    27 FUNC    GLOBAL DEFAULT   12
         __secure_getenv@GLIBC_2.2.5
   1704: 0000000000037930    27 FUNC    WEAK   DEFAULT   12
         secure_getenv@@GLIBC_2.17
   4648: 0000000000037930    27 FUNC    LOCAL  DEFAULT   12
         __GI_secure_getenv
   6817: 0000000000037930    27 FUNC    GLOBAL DEFAULT   12
         __secure_getenv@GLIBC_2.2.5
   6841: 0000000000037930    27 FUNC    WEAK   DEFAULT   12
         secure_getenv
   7231: 0000000000037930    27 FUNC    GLOBAL DEFAULT   12
         __libc_secure_getenv

libnss_hesiod.so references:

      9: 0000000000000000     0 FUNC    GLOBAL DEFAULT  UND
         __libc_secure_getenv@GLIBC_PRIVATE (5)
     93: 0000000000000000     0 FUNC    GLOBAL DEFAULT  UND
         __libc_secure_getenv@@GLIBC_PRIVATE

Internal references to secure_getenv do not go through the PLT.

I tried to update the abilist files as well as I could.

I still need to do manual tests to ensure backwards compatibility.  And 
I'm not sure if nss_hesiod still works.

-- 
Florian Weimer / Red Hat Product Security Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: secure-getenv.patch
Type: text/x-patch
Size: 29720 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20120719/0ec6fca0/attachment.bin>