Re: [gentoo-hardened] hardened-gcc mission critical update 1.5

[Ned Ludd]

On Sun, 2003-08-17 at 12:03, Alexander Gabert wrote:
[snip]

So after reading this I thought to myself I don't want to update my
entire world again so I wrote a little shell script to search everything
in my path to look for what you said, however interestingly enough I
could not find a single program which had it's .interp section linked to
/lib/ld-2.3.2.so as you described. 
I'm currently using hardened-gcc-1.4 and I assume that this bug is only
present in ~hppa 

Attached is a script I used to try and locate broken packages.

>
> this is the old behaviour which will bring massive problems when glibc
> is updated:
> 17:56:24 pappy@crusade pappy $ readelf -a /bin/ping | grep -i interp
>   INTERP         0x00a328 0x0000a328 0x0000a328 0x00011 0x00011 R   0x1
>       [Requesting program interpreter: /lib/ld-2.3.2.so]
>
> the new update-proof behaviour:
> 17:56:29 pappy@crusade pappy $ readelf -a /usr/bin/ssh | grep -i interp
>   INTERP         0x0000f4 0x000000f4 0x000000f4 0x00026 0x00026 R   0x1
>       [Requesting program interpreter: /lib/ld-linux.so.2]
>
> Remember that on hppa the softlink is not the same but the ebuild will
> take care once hppa is getting another glibc bug fixed concerning %r19.
>
> Every user of hardened-gcc should emerge the new hardened-gcc and then
> emerge --emptytree --update --verbose world to make sure no single
> program is using the old interpreter link any more.
>
> this is a "forward bug" warning which will have no effect until the
> glibc and the ld stays the same - but please take care.
>
>
> Alex
>
>
>
> --
> gentoo-hardened@g.o mailing list
-- 
Ned Ludd <solar@g.o>
Gentoo Linux Developer (Hardened)