sinjuginas/rpm-build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

verify-elf: make verify_lfs check libraries too

Browse Source 
Previously, verify_lfs checked if object has valid interpreter, but it
doesn't make sense in case of shared objects.  verify_lfs check is valid
for all ELFs linked with libraries supporting both LFS and non-LFS API
(libc.so and libz.so in our case).
This commit is contained in:
Gleb Fotengauer-Malinovskiy 2016-12-19 20:10:40 +03:00
parent c90b86d89b
commit cec71f3fbf
1 changed files with 4 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
scripts/verify-elf.in
View File

@ -269,46 +269,19 @@ verify_stack()
error_strict STACK "$f" "found executable STACK entry: $exe_stack"
}
find_elf_interp()
{
local f
f="$1"; shift
read_elf_segments "$f"
[ -n "$elf_segments" ] || return 0
printf '%s\n' "$elf_segments" |
sed -n 's,^[[:space:]]*\[Requesting program interpreter: \(/[^]]\+\)\]$,\1,p'
}
LFS_CFLAGS="$(getconf LFS_CFLAGS)"
non_lfs_funcs='@RPMCONFIGDIR@/verify-elf-non-lfs-funcs.list'
dump_ld_config='@RPMCONFIGDIR@/dump_ld_config'
default_elf_interp=
verify_lfs()
{
[ -n "$LFS_CFLAGS" -a -s "$non_lfs_funcs" ] || return 0
local f interp funcs
local f funcs
f="$1"; shift
interp="$(find_elf_interp "$f")" || {
error_normal LFS "$f" 'program interpreter not found'
return
}
[ -n "$default_elf_interp" ] || {
elf_segments=
default_elf_interp="$(find_elf_interp "$dump_ld_config")"
}
[ -n "$default_elf_interp" ] || {
error_normal LFS "$dump_ld_config" 'program interpreter not found'
default_elf_interp=/
}
[ "$interp" = "$default_elf_interp" ] ||
return 0
readelf --wide --dynamic "$f" |
grep -q '^[[:space:]]*[x0-9a-f]\+[[:space:]]\+(NEEDED)[[:space:]]\+Shared library:[[:space:]]\+\[lib[cz]\.so\..*\]' ||
return 0
funcs="$(readelf --wide --symbols "$f" |
sed -n 's/^[[:space:]]*[0-9]\+:[[:space:]]\+[0-9a-f]\+[[:space:]]\+[0-9]\+[[:space:]]\+FUNC[[:space:]]\+[^[:space:]]\+[[:space:]]\+DEFAULT[[:space:]]\+UND[[:space:]]\+\([^@[:space:]]\+\)@.*/\1/p' |