5 Star 0 Fork 6

src-openEuler / jansi-native

 / 详情

【22.03_LTS_SP1_RC2】【x86/arm】jansi-native存在不安全的编译选项STRIP

Done
Bug
Opened this issue  
2022-12-08 10:48

软件信息:
1) OS版本及分支:openEuler 22.03 lts sp1 round2
2) 内核信息:Linux openEuler 5.10.0-132.0.0.73.oe2203sp1
3) 发现问题的组件版本信息:
repo:OS,everything,EPOL

【问题复现步骤】
1、PIE:查看编译日志中是否包含FPIE编译选项
2、STRIP:(1):rpm2cpio **.rpm|cpio -id (2)file $file
3、RPATH:(1):rpm2cpio **.rpm|cpio -id (2)readelf -d $file
【预期结果】
不存在不安全的编译选项:
1、包含FPIE安全编译选项
2、不包含not stripped
3、不包含rpath/runpath
【实际结果】
jansi-native存在不安全的编译选项STRIP

Comments (2)

wangxiaoya created缺陷

Hi ryuo, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: sig-Java, and any of the maintainers: @雒海波 , @sinever , @chong_W , @rita_dong , @caodongxia , @xu_ping

openeuler-ci-bot added
 
sig/sig-Java
label
wangxiaoya set assignee to 雒海波
wangxiaoya set priority to Main
wangxiaoya set start time to 2022-12-08
wangxiaoya set deadline to 2022-12-08
wangxiaoya changed title
wangxiaoya changed description
zjl_long changed assignee from 雒海波 to caodongxia

/usr/lib/java/jansi-native/jansi-linux64.jar_/META-INF/native/linux64/libjansi.so扫描出来strip
jar里包含的文件,源码及编译过程中不涉及编译该jar包,无需修改

caodongxia changed issue state from 待办的 to 已完成

Sign in to comment

Status
Assignees
Projects
Milestones
Pull Requests
Successfully merging a pull request will close this issue.
Branches
Planed to start   -   Planed to end
-
Top level
Priority
Duration (hours)
参与者(3)
5329419 openeuler ci bot 1632792936
1
https://gitee.com/src-openeuler/jansi-native.git
git@gitee.com:src-openeuler/jansi-native.git
src-openeuler
jansi-native
jansi-native

Search