[PATCH] Avoid mapping past end of shared object (BZ #18685)
Florian Weimer
fweimer@redhat.com
Fri Jul 17 11:25:00 GMT 2015
On 07/17/2015 10:03 AM, OndÅej BÃlka wrote:
> On Fri, Jul 17, 2015 at 09:43:29AM +0200, Florian Weimer wrote:
>> On 07/17/2015 09:35 AM, OndÅej BÃlka wrote:
>>
>>> Also could you explain how this is security risk? If that needs
>>> modification of elf then attacker could run arbitrary commands by
>>> overriding main for example.
>>
>> Just because I comment on a thread doesn't mean I consider it
>> security-related.
>>
>> Or what do you mean?
>>
> Well here I did bit distracted in reading thread, starting reply, then
> writing what I wanted to ask to wrong post. I wanted to reply instead to
> what Carlos wrote:
Okay, well, I think a safe ldd should be a goal, but I don't think we
can currently make such a commitment.
--
Florian Weimer / Red Hat Product Security
More information about the Libc-alpha
mailing list