sinjuginas/rpm-build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Implemented VERIFY_ELF_STACK

Browse Source
This commit is contained in:
Дмитрий Левин 2006-04-04 16:42:49 +00:00
parent ed45223b24
commit f2cdd50995
2 changed files with 32 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
scripts/brp-verify_elf.in
View File

@ -26,8 +26,9 @@ ValidateBuildRoot
cd "$RPM_BUILD_ROOT"
export VERIFY_ELF_ARCH=normal
export VERIFY_ELF_FHS=relaxed
export VERIFY_ELF_FHS=normal
export VERIFY_ELF_RPATH=normal
export VERIFY_ELF_STACK=normal
export VERIFY_ELF_TEXTREL=normal
export VERIFY_ELF_UNRESOLVED=normal
@ -54,6 +55,12 @@ for t in `printf %s "$RPM_VERIFY_ELF_METHOD" |tr , ' '`; do
rpath=*)
VERIFY_ELF_RPATH="${t#rpath=}"
;;
stack)
VERIFY_ELF_STACK=normal
;;
stack=*)
VERIFY_ELF_STACK="${t#stack=}"
;;
textrel)
VERIFY_ELF_TEXTREL=normal
;;
@ -70,6 +77,7 @@ for t in `printf %s "$RPM_VERIFY_ELF_METHOD" |tr , ' '`; do
VERIFY_ELF_ARCH=normal
VERIFY_ELF_FHS=normal
VERIFY_ELF_RPATH=normal
VERIFY_ELF_STACK=normal
VERIFY_ELF_TEXTREL=normal
VERIFY_ELF_UNRESOLVED=normal
;;
@ -77,6 +85,7 @@ for t in `printf %s "$RPM_VERIFY_ELF_METHOD" |tr , ' '`; do
VERIFY_ELF_ARCH=strict
VERIFY_ELF_FHS=strict
VERIFY_ELF_RPATH=strict
VERIFY_ELF_STACK=strict
VERIFY_ELF_TEXTREL=strict
VERIFY_ELF_UNRESOLVED=strict
;;
@ -84,6 +93,7 @@ for t in `printf %s "$RPM_VERIFY_ELF_METHOD" |tr , ' '`; do
VERIFY_ELF_ARCH=relaxed
VERIFY_ELF_FHS=relaxed
VERIFY_ELF_RPATH=relaxed
VERIFY_ELF_STACK=relaxed
VERIFY_ELF_TEXTREL=relaxed
VERIFY_ELF_UNRESOLVED=relaxed
;;
@ -99,6 +109,8 @@ done
[ -z "$RPM_VERIFY_ELF_FHS" ] || VERIFY_ELF_FHS="$RPM_VERIFY_ELF_FHS"
[ "$VERIFY_ELF_RPATH" != no ] || VERIFY_ELF_RPATH=
[ -z "$RPM_VERIFY_ELF_RPATH" ] || VERIFY_ELF_RPATH="$RPM_VERIFY_ELF_RPATH"
[ "$VERIFY_ELF_STACK" != no ] || VERIFY_ELF_STACK=
[ -z "$RPM_VERIFY_ELF_STACK" ] || VERIFY_ELF_STACK="$RPM_VERIFY_ELF_STACK"
[ "$VERIFY_ELF_TEXTREL" != no ] || VERIFY_ELF_TEXTREL=
[ -z "$RPM_VERIFY_ELF_TEXTREL" ] || VERIFY_ELF_TEXTREL="$RPM_VERIFY_ELF_TEXTREL"
[ "$VERIFY_ELF_UNRESOLVED" != no ] || VERIFY_ELF_UNRESOLVED=
@ -107,7 +119,7 @@ done
: ${RPM_VERIFY_ELF_TOPDIR:=}
[ -d "$RPM_BUILD_ROOT$RPM_VERIFY_ELF_TOPDIR" ] || exit 0
echo "Verifying ELF objects in $RPM_BUILD_ROOT$RPM_VERIFY_ELF_TOPDIR (arch=$VERIFY_ELF_ARCH,fhs=$VERIFY_ELF_FHS,rpath=$VERIFY_ELF_RPATH,textrel=$VERIFY_ELF_TEXTREL,unresolved=$VERIFY_ELF_UNRESOLVED)"
echo "Verifying ELF objects in $RPM_BUILD_ROOT$RPM_VERIFY_ELF_TOPDIR (arch=$VERIFY_ELF_ARCH,fhs=$VERIFY_ELF_FHS,rpath=$VERIFY_ELF_RPATH,stack=$VERIFY_ELF_STACK,textrel=$VERIFY_ELF_TEXTREL,unresolved=$VERIFY_ELF_UNRESOLVED)"
dump_ld_config='@RPMCONFIGDIR@/dump_ld_config'
RPM_VERIFY_ELF_LDD_RPATH="$("$dump_ld_config" '' "$RPM_BUILD_ROOT")"

21
scripts/verify-elf.in
View File

@ -77,7 +77,7 @@ for f in "$@"; do
fi
if [ -n "$VERIFY_ELF_RPATH" ]; then
rpath=`printf %s "$objdump_info" |awk '{if ($1=="RPATH") print $2}'`
rpath="$(printf %s "$objdump_info" |awk '{if ($1=="RPATH") print $2}')"
if [ -n "$rpath" ]; then
prefix=
if [ -z "${rpath##:*}" ]; then
@ -112,9 +112,25 @@ for f in "$@"; do
fi
fi
fi
if [ -n "$VERIFY_ELF_STACK" ]; then
if [ -z "${t##*ELF* executable*dynamically linked*}" -o -z "${t##*ELF* shared object*}" ]; then
stack="$(printf %s "$objdump_info" |sed -ne 's/^[[:space:]]*STACK[[:space:]]\+\([^[:space:]]\+\).*/\1/p')"
if [ -z "$stack" ]; then
[ "$VERIFY_ELF_STACK" = strict ] && prefix=ERROR || prefix=WARNING
[ "$VERIFY_ELF_STACK" = strict ] && rc=1 ||:
Info "$prefix: $f: STACK entry not found"
elif [ "$stack" = on ]; then
[ "$VERIFY_ELF_STACK" = strict ] && prefix=ERROR || prefix=WARNING
[ "$VERIFY_ELF_STACK" = strict ] && rc=1 ||:
stack="$(printf %s "$objdump_info" |sed -ne 's/^[[:space:]]*STACK[[:space:]]\+\([^[:space:]]\+.*\)/\1/p')"
Info "$prefix: $f: found executable STACK entry: $stack"
fi
fi
fi
if [ -n "$VERIFY_ELF_TEXTREL" ]; then
textrel=`printf %s "$objdump_info" |awk '{if ($1=="TEXTREL") print $2}'`
textrel="$(printf %s "$objdump_info" |sed -ne 's/^[[:space:]]*TEXTREL[[:space:]]\+\([^[:space:]]\+\).*/\1/p')"
if [ -n "$textrel" ]; then
[ "$VERIFY_ELF_TEXTREL" = relaxed ] && prefix=WARNING || prefix=ERROR
[ "$VERIFY_ELF_TEXTREL" = relaxed ] || rc=1
@ -192,7 +208,6 @@ END {
break
done
fi
done
exit $rc