Bug 10018

Summary: libnetfilter_log 1.0.1 has been released
Product: IPFire Reporter: Stefan Schantl <stefan.schantl>
Component: libnetfilter_logAssignee: Stefan Schantl <stefan.schantl>
Status: CLOSED FIXED QA Contact: Michael Tremer <michael.tremer>
Severity: - Unknown -    
Priority: - Unknown -    
Version: 3   
Hardware: unspecified   
OS: Unspecified   

Description Stefan Schantl 2012-02-01 19:34:15 UTC
Updates to the build procedure and a fix for an error with automake 1.9.
Comment 1 Stefan Schantl 2012-02-01 19:49:41 UTC
The quality agent report an issue:

+ /usr/lib/pakfire/quality-agent
 E |   Is not relro: /builddir/libnetfilter_log-1.0.1-1.ip3//usr/lib/libnetfilter_log_libipulog.so.1.0.0
 I | Check: 050-relro
 I |   Text relocations force the dynamic linker to perform extra 
 I |   work at startup, waste system resources, and may pose a 
 I |   security risk. On some architectures, the code may not even 
 I |   function properly, if at all.
 I | 


I've checked, the elf header of the libnetfilter_log_libipulog.so.1.0.0 and the GNU_RELRO entry is missing.
Comment 2 Stefan Schantl 2012-07-06 20:51:14 UTC
The quality agent error has been gone - may that depend on brocken binutils which has been fixed now.

Please test and report any errors or problems.

http://git.ipfire.org/?p=people/stevee/ipfire-3.x.git;a=commit;h=1638b3e83727ebd304d8f0782437e245bf18e4c6
Comment 3 Stefan Schantl 2012-07-06 21:57:00 UTC
Error still exist but only on i686.
Comment 4 Stefan Schantl 2012-07-08 16:08:24 UTC
I've some new information, about those problem on i686 architectures. I've looked on the elf header of the libnetfilter_log.so and the libnetfilter_log_libipulog.so. On the libnetfilter_log_libipulog.so is the GNU_RELRO flag missing but there is a NULL flag instead - so I think there is a problem in the build system of libnetfiler_log or a problem on the linker.

----

readelf -l libnetfilter_log.so.1.1.0

Elf file type is DYN (Shared object file)
Entry point 0xdb0
There are 8 program headers, starting at offset 52

Program Headers:
  Type           Offset   VirtAddr   PhysAddr   FileSiz MemSiz  Flg Align
  LOAD           0x000000 0x00000000 0x00000000 0x02fa0 0x02fa0 R E 0x1000
  LOAD           0x003ea8 0x00003ea8 0x00003ea8 0x00164 0x00168 RW  0x1000
  DYNAMIC        0x003ea8 0x00003ea8 0x00003ea8 0x000d0 0x000d0 RW  0x4
  NOTE           0x000134 0x00000134 0x00000134 0x00024 0x00024 R   0x4
  GNU_EH_FRAME   0x002904 0x00002904 0x00002904 0x00144 0x00144 R   0x4
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x4
  GNU_RELRO      0x003ea8 0x00003ea8 0x00003ea8 0x00158 0x00158 R   0x1
  PAX_FLAGS      0x000000 0x00000000 0x00000000 0x00000 0x00000     0x4

 Section to Segment mapping:
  Segment Sections...
   00     .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .plt .text .rodata .eh_frame_hdr .eh_frame 
   01     .dynamic .got .data .bss 
   02     .dynamic 
   03     .note.gnu.build-id 
   04     .eh_frame_hdr 
   05     
   06     .dynamic .got 
   07     

---

readelf -l libnetfilter_log_libipulog.so.1.0.0

Elf file type is DYN (Shared object file)
Entry point 0x8b0
There are 8 program headers, starting at offset 52

Program Headers:
  Type           Offset   VirtAddr   PhysAddr   FileSiz MemSiz  Flg Align
  LOAD           0x000000 0x00000000 0x00000000 0x01180 0x01180 R E 0x1000
  LOAD           0x001e60 0x00002e60 0x00002e60 0x00194 0x001a4 RW  0x1000
  DYNAMIC        0x001eb8 0x00002eb8 0x00002eb8 0x000d0 0x000d0 RW  0x4
  NOTE           0x000134 0x00000134 0x00000134 0x00024 0x00024 R   0x4
  GNU_EH_FRAME   0x000f88 0x00000f88 0x00000f88 0x0005c 0x0005c R   0x4
  GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x4
  NULL           0x000000 0x00000000 0x00000000 0x00000 0x00000     0
  PAX_FLAGS      0x000000 0x00000000 0x00000000 0x00000 0x00000     0x4

 Section to Segment mapping:
  Segment Sections...
   00     .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .plt .text .rodata .eh_frame_hdr .eh_frame 
   01     .data.rel.ro .dynamic .got .bss 
   02     .dynamic 
   03     .note.gnu.build-id 
   04     .eh_frame_hdr 
   05     
   06     
   07
Comment 5 Stefan Schantl 2012-07-22 11:07:12 UTC
Fixed this issue on the following commit:

http://git.ipfire.org/?p=people/stevee/ipfire-3.x.git;a=commit;h=b2e71eea4dabac54776e86dc4a2495b56a594052
Comment 6 Pakfire Build Service 2012-07-22 11:14:53 UTC
libnetfilter_log-1.0.1-1.ip3 has been pushed to the IPFire 3 testing repository.

You can provide feedback for this build here:
  https://pakfire.ipfire.org/build/07fbde03-cb66-46b4-8a75-92361b03f5b1
Comment 7 Pakfire Build Service 2012-07-22 12:24:10 UTC
libnetfilter_log-1.0.1-1.ip3 has been pushed to the IPFire 3 unstable repository.

You can provide feedback for this build here:
  https://pakfire.ipfire.org/build/07fbde03-cb66-46b4-8a75-92361b03f5b1
Comment 8 Pakfire Build Service 2012-07-22 14:45:37 UTC
libnetfilter_log-1.0.1-1.ip3 has been pushed to the IPFire 3 stable repository.

If problems still persist, please make note of it in this bug report.