14 Star 0 Fork 14

src-openEuler / evolution-data-server

 / 详情

【23.03_RC1】【x86/arm】evolution-data-server存在不安全的编译选项RPATH、

已验收
缺陷
创建于  
2023-03-01 11:49

软件信息:
1) OS版本及分支:openEuler 23.03 round1
2) 内核信息:Linux openEuler 6.1.8-3.0.0.10.oe23.03
3) 发现问题的组件版本信息:
repo:OS,everything,EPOL

【问题复现步骤】
1、PIE:查看编译日志中是否包含FPIE编译选项
2、STRIP:(1):rpm2cpio **.rpm|cpio -id (2)file $file
3、RPATH:(1):rpm2cpio **.rpm|cpio -id (2)readelf -d $file
【预期结果】
不存在不安全的编译选项:
1、包含FPIE安全编译选项
2、不包含not stripped
3、不包含rpath/runpath
【实际结果】
evolution-data-server存在不安全的编译选项RPATH、

评论 (2)

wangxiaoya 创建了缺陷

Hi ryuo, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Desktop, and any of the maintainers: @small_leek , @t.feng , @wenlongd , @Randy.Wang , @weidongkl , @douyan , @薄皮小笼包 , @yanan-rock , @丈青山 , @weijin-deng

openeuler-ci-bot 添加了
 
sig/Desktop
标签
wangxiaoya 计划开始日期设置为2023-03-01
wangxiaoya 计划截止日期设置为2023-03-08
wangxiaoya 优先级设置为主要

以下文件存在rpath路径,通过chrpath -d 去除

/usr/libexec/evolution-data-server/installed-tests/test-book-client-remove-contacts
/usr/libexec/evolution-data-server/installed-tests/test-fixture
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-move-by-de-DE
/usr/libexec/evolution-data-server/installed-tests/test-book-client-remove-contact
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-create-cursor
/usr/libexec/evolution-data-server/installed-tests/test-contact-types
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-get-contact
/usr/libexec/evolution-data-server/installed-tests/test-cal-component
/usr/libexec/evolution-data-server/installed-tests/test-book-client-add-and-get-sync
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-set-target
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-get-contact
/usr/libexec/evolution-data-server/installed-tests/test-ebook-add-contact
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-move-by-en-US
/usr/libexec/evolution-data-server/installed-tests/test-ebook-remove-contacts
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-move-by-fr-CA
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-create-object
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-move-by-de-DE
/usr/libexec/evolution-data-server/installed-tests/test-ebook-commit-contact
/usr/libexec/evolution-data-server/installed-tests/test-book-client-view-operations
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-static-capabilities
/usr/libexec/evolution-data-server/installed-tests/test-book-client-preserve-uid
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-move-by-posix
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-get-view
/usr/libexec/evolution-data-server/installed-tests/test-book-client-cursor-create
/usr/libexec/evolution-data-server/installed-tests/test-book-client-add-contact
/usr/libexec/evolution-data-server/installed-tests/test-vcard-parsing
/usr/libexec/evolution-data-server/installed-tests/test-book-client-get-view
/usr/libexec/evolution-data-server/installed-tests/test-book-client-get-revision
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-change-locale
/usr/libexec/evolution-data-server/installed-tests/test-book-client-get-contact
/usr/libexec/evolution-data-server/installed-tests/test-book-client-custom-summary
/usr/libexec/evolution-data-server/installed-tests/test-cal-cache-intervals
/usr/libexec/evolution-data-server/installed-tests/test-ebook-remove-contact-by-id
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-move-by-posix
/usr/libexec/evolution-data-server/installed-tests/test-book-client-refresh
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-get-free-busy
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-move-by-fr-CA
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-required-fields
/usr/libexec/evolution-data-server/installed-tests/test-type-param
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-supported-auth-methods
/usr/libexec/evolution-data-server/installed-tests/test-cal-reminders
/usr/libexec/evolution-data-server/installed-tests/test-cal-meta-backend
/usr/libexec/evolution-data-server/installed-tests/test-cal-cache-search
/usr/libexec/evolution-data-server/installed-tests/test-cal-recur
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-refresh
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-send-objects
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-contact
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-get-attachment-uris
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-add-timezone
/usr/libexec/evolution-data-server/installed-tests/test-cal-cache-getters
/usr/libexec/evolution-data-server/installed-tests/test-cal-utils
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-receive-objects
/usr/libexec/evolution-data-server/installed-tests/test-book-client-e164-param
/usr/libexec/evolution-data-server/installed-tests/test-book-client-get-contact-uids
/usr/libexec/evolution-data-server/installed-tests/test-book-client-add-and-get-async
/usr/libexec/evolution-data-server/installed-tests/test-phone-number
/usr/libexec/evolution-data-server/installed-tests/test-query
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-set-sexp
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-bulk-methods
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-supported-fields
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-offline
/usr/libexec/evolution-data-server/installed-tests/test-cal-cache-offline
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-change-locale
/usr/libexec/evolution-data-server/installed-tests/test-book-client-suppress-notifications
/usr/libexec/evolution-data-server/installed-tests/test-book-client-revision-view
/usr/libexec/evolution-data-server/installed-tests/test-ebook-remove-contact
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-get-revision
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-modify-object
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-get-object-list
/usr/libexec/evolution-data-server/installed-tests/test-book-client-photo-is-uri
/usr/libexec/evolution-data-server/installed-tests/test-book-client-write-write
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-remove-object
/usr/libexec/evolution-data-server/installed-tests/e-source-registry-test
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-create-cursor
/usr/libexec/evolution-data-server/installed-tests/test-book-client-remove-contact-by-uid
/usr/libexec/evolution-data-server/installed-tests/test-cal-client-revision-view
/usr/libexec/evolution-data-server/installed-tests/test-book-client-uid-only-view
/usr/libexec/evolution-data-server/installed-tests/test-untyped-phones
/usr/libexec/evolution-data-server/installed-tests/libedataserver-test
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-set-target
/usr/libexec/evolution-data-server/installed-tests/test-book-client-self
/usr/libexec/evolution-data-server/installed-tests/test-book-client-modify-contact
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-set-sexp
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-move-by-en-US
/usr/libexec/evolution-data-server/installed-tests/test-book-cache-cursor-calculate
/usr/libexec/evolution-data-server/installed-tests/test-intervaltree
/usr/libexec/evolution-data-server/installed-tests/test-cal-backend-sexp
/usr/libexec/evolution-data-server/installed-tests/test-sqlite-cursor-calculate
/usr/libexec/evolution-data-server/installed-tests/test-ebook-get-book-view
/usr/libexec/evolution-data-server/installed-tests/test-book-meta-backend
wk333 任务状态待办的 修改为已完成
wangxiaoya 优先级主要 修改为次要
张以正 任务状态已完成 修改为已验收

登录 后才可以发表评论

状态
负责人
项目
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
预计工期 (小时)
参与者(3)
5329419 openeuler ci bot 1632792936
1
https://gitee.com/src-openeuler/evolution-data-server.git
git@gitee.com:src-openeuler/evolution-data-server.git
src-openeuler
evolution-data-server
evolution-data-server

搜索帮助