On 02/20/2013 05:33 PM, Jakub Jelinek wrote:
Of course, the script needs to be smart, because e.g. glibc will
always
contain __xstat symbol, as it is part of the exported ABI.
It's sufficient to consider references only, definitions don't count. I
believe Eric's script does exactly that. (symboldb has separate tables
for ELF definitions and references, too.)
In fact, it turns out the glibc-common match I reported is *not* a false
positive:
file | symbol
--------------------+----------
/usr/bin/iconv | __fxstat
/usr/bin/iconv | __xstat
/usr/bin/locale | __fxstat
/usr/bin/locale | __xstat
/usr/bin/localedef | __fxstat
/usr/bin/localedef | __lxstat
/usr/bin/localedef | __xstat
/usr/bin/rpcgen | __xstat
/usr/bin/sprof | __fxstat
(9 rows)
--
Florian Weimer / Red Hat Product Security Team