Gentoo Archives: gentoo-hardened

From: pageexec@××××××××.hu
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
Date: Sat, 23 Jan 2010 01:11:00
Message-Id: 4B5A4C82.15173.487133C7@pageexec.freemail.hu
In Reply to: [gentoo-hardened] Cannot build OpenOffice with PaX enabled... by Michael Edenfield
1 On 22 Jan 2010 at 19:43, Michael Edenfield wrote:
2
3 > dmake: Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
4 >
5 > and a corresponding kernel error:
6 >
7 > checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp
8 > 000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]
9 >
10 > But this doesn't look like a typical PaX error message, so I'm not sure what
11 > checkdll is doing that crashes. Anyone have an idea where I should start
12 > looking?
13
14 this is likely the result of the RELRO enforcement i added last year
15 and a corresponding ld.so bug/feature where it tries to set a read-only
16 variable after RELRO has made the given area actually read-only (and
17 further write/mprotect attempts fail on it).
18
19 all this is the result of the fundamentally broken GNU_STACK 'feature'
20 and the best fix is to avoid generating RWE GNU_STACK headers in the
21 first place. you'll probably have to dig into the OO build system to
22 find out which .so got such a GNU_STACK header and where you can make
23 it disappear.