[PATCH] Avoid mapping past end of shared object (BZ #18685)
Mike Frysinger
vapier@gentoo.org
Fri Jul 17 02:08:00 GMT 2015
On 16 Jul 2015 13:17, Carlos O'Donell wrote:
> On 07/16/2015 12:36 PM, Andreas Schwab wrote:
> > Perhaps ldd should use a specially compiled ld.so that has a lot of
> > extra checks added (so that it can be run on arbitrary objects without
> > creating security hazards).
>
> ldd should be a distinct tool that uses libelf, and provides deeper
> introspection and options. This way we have a second implementation
> of the loader rules in a cleaner and concise form that we can use
> to double-check assertions about load order and cycle breakage,
> and cross-check ld.so changes.
i agree in having a dedicated/robust tool, but i don't think it means we should
disable the trace option in the ldso itself. having a way to get the actual
details out of the ldso i think is still valuable.
i also don't think glibc should be dependent upon the elfutils package ...
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20150717/4a39c2f0/attachment.sig>
More information about the Libc-alpha
mailing list