[Bug libc/23323] Recommendations for devs stuck with old glibc versions

Florian Weimer fweimer@redhat.com
Thu Nov 30 11:58:35 GMT 2023


* amb via Libc-help:

> I am forced to build against an old glibc version in order to run my
> code on a large number of target linux systems. For developers like
> me, what is the recommended way to mitigate the issue described in
> https://sourceware.org/bugzilla/show_bug.cgi?id=23323 ?

It's just a missed hardening opportunity.  Your binary will likely have
other gadgets in it anyway.  Note that we have not treated it as a
security vulnerability.

If your main program does not use ELF constructors, you can use custom
startup files without the ELF constructor trampoline.

Thanks,
Florian



More information about the Libc-help mailing list