Missing security fix in elf/dl-open.c?

Florian Weimer fweimer@redhat.com
Tue Feb 24 17:13:00 GMT 2015


Some downstreams include this hunk in their patches related to
CVE-2010-3847 and CVE-2011-0536:

Index: glibc-2.12-2-gc4ccff1/elf/dl-object.c
===================================================================
--- glibc-2.12-2-gc4ccff1.orig/elf/dl-object.c
+++ glibc-2.12-2-gc4ccff1/elf/dl-object.c
@@ -214,6 +214,9 @@ _dl_new_object (char *realname, const ch
     out:
       new->l_origin = origin;
     }
+  else if (INTUSE(__libc_enable_secure) && type == lt_executable)
+    /* The origin of a privileged program cannot be trusted.  */
+    new->l_origin = (char *) -1;

   return new;
 }

I can't find this in glibc master.  Is the hunk above needed, or is it
just hardening?

-- 
Florian Weimer / Red Hat Product Security



More information about the Libc-alpha mailing list