Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 27 Jan 2018 20:26:21 +0100
From: Szabolcs Nagy <nsz@...t70.net>
To: Stefan Fröberg <stefan.froberg@...roprogram.com>
Cc: musl@...ts.openwall.com
Subject: Re: BUG: $ORIGIN does not seem to work

* Stefan Fröberg <stefan.froberg@...roprogram.com> [2018-01-27 18:20:27 +0200]:
> Szabolcs Nagy kirjoitti 27.01.2018 klo 13:07:
> > * Stefan Fröberg <stefan.froberg@...roprogram.com> [2018-01-27 01:50:21 +0200]:
> >> My ldd is just symbolic link inside musl chroot environment, to
> >> /lib/ld-musl-x86_64.so.1
> >> and it's symbolic link to /lib/libc.so
> >>
> >> Here is readelf output of that test program
> >> readelf -d x
> >>
> >> Dynamic section at offset 0xe10 contains 24 entries:
> >>   Tag        Type                         Name/Value
> >>  0x0000000000000001 (NEEDED)             Shared library: [libcrypto.so.1.1]
> >                                                             ^^^^^^^^^^^^^^^^
> > this looks like the wrong library version
> >
> > if you had straced the ldd output you would have seen
> > that musl tries to open lib/libcrypto.so.1.1, but you
> > probably only have lib/libcrypto.so.1.0.0 based on the
> > glibc ldd output below.
> No, that ldd was run inside, pure, chrooted musl environment. No glibc
> inside.

this does not matter

> These are the only libcrypto* files inside that chroot environment:
> 
>  ls -lah /usr/lib/libcrypto.*
> -rw-r--r--    1 0        0           5.0M Dec 17 00:24 /usr/lib/libcrypto.a
> lrwxrwxrwx    1 0        0             16 Dec 17 00:24
> /usr/lib/libcrypto.so -> libcrypto.so.1.1
> -rwxr-xr-x    1 0        0           3.0M Jan 26 12:58
> /usr/lib/libcrypto.so.1.1
> 

like i said, you linked the wrong library, try to link
the right one. again, if you run the ldso under strace
the problem will be obvious and we dont have to waste time.

you should also strace ld to see what gets linked,
if it's /usr/lib/libcrypto... then that's wrong.
(instead of strace you can use -Wl,--trace)

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ