[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=11177

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[paul_woegerer at mentor dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=11177

Paul Woegerer <paul_woegerer at mentor dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
                 CC|                            |paul_woegerer at mentor dot com
         Resolution|WONTFIX                     |---

--- Comment #8 from Paul Woegerer <paul_woegerer at mentor dot com> ---
For lttng-ust we would like to use the la_preinit LD_AUDIT callback to make a
traced application defer the execution of main() until the static constructor
execution that initializes the lttng-ust framework has completed.

For this to be practical and end-user friendly we would need LD_AUDIT to be
more robust. Nowadays many applications are linked against libicu and for all
those the la_preinit approach is currently not usable due to this bug. Also
rebuilding shared libraries that cause problems in the context of LD_AUDIT as
suggested in comment_#6 is often not practical.

It would be great if someone could look again into this issue and see if it
would be feasible to solve this problem for once and all.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug dynamic-link/11177] LD_AUDIT doesn't work with shared libraries containing no code

[jsm28 at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=11177

Joseph Myers <jsm28 at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|libc                        |dynamic-link

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[eero dot tamminen at nokia dot com]

------- Additional Comments From eero dot tamminen at nokia dot com  2010-02-08 09:03 -------
(In reply to comment #6)
> Just fix the DSOs and be done with it.

Same issue on SUSE.

RedHat package seems to be patching libicudata by sed'ing -nostdlib etc away:
  sed -i -- "s/-nodefaultlibs -nostdlib//" config/mh-linux

Which increases lib size by 1.5kB which is acceptable.

I hope your change gets propagated to upstream libicudata if it's not already
reported there (trac is pretty awful as bug database from the search
perspective, but on quick search I didn't find anything about this:
http://bugs.icu-project.org/trac/).


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[drepper at redhat dot com]

------- Additional Comments From drepper at redhat dot com  2010-01-28 08:17 -------
(In reply to comment #5)
> Either dynamic linker should reject linking such libraries or LD_AUDIT should
> accept them.

That's nonsense.  There are simply different requirements.  Just fix the DSOs
and be done with it.  The fact that whatever tests the debian system performs
aren't showing problems doesn't mean anything.  Special casing just creates
problems.


-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |WONTFIX


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[eero dot tamminen at nokia dot com]

------- Additional Comments From eero dot tamminen at nokia dot com  2010-01-27 09:37 -------
> The /usr/lib/libicudata.so.40 is miscompiled.  I don't see this in
> the version on my machine and it should never happen.

But it's still valid ELF object, isn't it?

Either dynamic linker should reject linking such libraries or LD_AUDIT should
accept them.

Re-opening.


-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[eero dot tamminen at nokia dot com]

------- Additional Comments From eero dot tamminen at nokia dot com  2010-01-21 15:23 -------
Created an attachment (id=4548)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=4548&action=view)
readelf -S /usr/lib/libicudata.so.38.1 (Debian Stable)

(In reply to comment #3)
> The /usr/lib/libicudata.so.40 is miscompiled.

Attached is the output of "readelf -S /usr/lib/libicudata.so.38.1" from Debian
stable and it definitely doesn't have a text section.  Here are its sources and
packaging:
  http://packages.debian.org/lenny/libicu38

There are no bug reports on Debian about building libicudata:
  http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=libicu38;dist=stable


> I don't see this in the version on my machine and it should never happen.

What sections you have in that library on RedHat?


And anyway...  LD_AUDIT asserting on something that the dynamic linker accepts
sounds dubious.  Either the dynamic linker should assert already on linking
this kind of a library or LD_AUDIT should only give a warning.


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[drepper at redhat dot com]

------- Additional Comments From drepper at redhat dot com  2010-01-20 02:04 -------
The /usr/lib/libicudata.so.40 is miscompiled.  I don't see this in the version
on my machine and it should never happen.

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[kirill at shutemov dot name]

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kirill at shutemov dot name


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[andris dot zeila at accenture dot com]

------- Additional Comments From andris dot zeila at accenture dot com  2010-01-15 11:05 -------
Created an attachment (id=4521)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=4521&action=view)
Sample application


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/11177] LD_AUDIT doesn't work with shared libraries containing no code

[andris dot zeila at accenture dot com]

------- Additional Comments From andris dot zeila at accenture dot com  2010-01-15 11:05 -------
Created an attachment (id=4520)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=4520&action=view)
Sample audit library


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=11177

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.