Skip to content

Paranoid header and library path checking

Romain Naour buildroot 2 versions – New

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest12 patches 0 repliesNew
  2. v212 patches 0 repliesSuperseded

Changes in v3 from the cover letter

* In ext toolchain wrapper, remove an empty line (Romain Naour)

* Update the gcc/binutils patches for arc-2014.08 toolchain (Romain Naour)

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/12toolchain-external: instrument wrapper to warn about unsafe pathstoolchain/toolchain-external/ext-toolchain-wrapper.c+52 -00 replies
2/12binutils/2.24: add patch to warn about unsafe library pathspackage/binutils/2.24/600-poison-system-directories.patch+279 -00 replies
3/12binutils/2.23: add patch to warn about unsafe library pathspackage/binutils/2.23.2/600-poison-system-directories.patch+279 -00 replies
4/12binutils/2.22: add patch to warn about unsafe library pathspackage/binutils/2.22/600-poison-system-directories.patch+274 -00 replies
5/12binutils/arc-2014.08: add patch to warn about unsafe library pathspackage/binutils/arc-2014.08/600-poison-system-directories.patch+279 -00 replies
6/12gcc/4.9: add patch to warn about unsafe header pathspackage/gcc/4.9.2/910-gcc-poison-system-directories.patch+207 -00 replies
7/12gcc/4.8: add patch to warn about unsafe header pathspackage/gcc/4.8.3/910-gcc-poison-system-directories.patch+207 -00 replies
8/12gcc/arc-2014.08: add patch to warn about unsafe header pathspackage/gcc/arc-2014.08/910-gcc-poison-system-directories.patch+221 -00 replies
9/12gcc/4.7: add patch to warn about unsafe header pathspackage/gcc/4.7.4/910-gcc-poison-system-directories.patch+207 -00 replies
10/12gcc: enable poison system directories optionpackage/gcc/gcc-final/gcc-final.mk+1 -00 replies
11/12binutils: enable poison system directories optionpackage/binutils/binutils.mk+1 -00 replies
12/12Add option for paranoid unsafe path checkingConfig.in package/Makefile.in+24 -00 replies

Reviews trailers per patch

4 of 12 patches have a Reviewed-by or Acked-by.

PatchRomain NaourYann E. MORIN
1/12R-b T-b
2/12T-b
3/12T-b
4/12T-b
5/12T-b
6/12T-b
7/12T-b
8/12T-b
9/12T-b
10/12A-b T-b A-b
11/12A-b T-b A-b
12/12R-b T-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v3 thread

Cover letter [Buildroot] [PATCH v3 00/12] Paranoid header and library path checking

Hello,

Here is a new iteration of the patch series adding paranoid checking to the header and library paths, to avoid seeing host paths being used when cross-compiling things for the target.

It would be good to get some quick testing from others, to help getting this series merged. Once merged, we can enable it in the autobuilders.

Thanks!

Thomas

Changes since v2:
* In ext toolchain wrapper, remove an empty line (Romain Naour)

* Update the gcc/binutils patches for arc-2014.08 toolchain (Romain Naour)

Changes since v1:

* In ext toolchain wrapper, make the unsafe_paths variable a static variable, as suggested by Yann.

* In ext toolchain wrapper, add "/lib" to the list of paths to checks.

* In ext toolchain wrapper, print the program name when showing a warning/error, using program_invocation_short_name. Suggested by Yann.

* In ext toolchain wrpaper, Make a few improvements in the loop checking for -I and -L, suggested by Yann.

* Update the binutils and gcc patches to the current versions in master.

* Added Acked-by tags from Yann E. Morin on certain patches.

Thomas Petazzoni (12):
toolchain-external: instrument wrapper to warn about unsafe paths binutils/2.24: add patch to warn about unsafe library paths binutils/2.23: add patch to warn about unsafe library paths binutils/2.22: add patch to warn about unsafe library paths binutils/arc-2014.08: add patch to warn about unsafe library paths gcc/4.9: add patch to warn about unsafe header paths gcc/4.8: add patch to warn about unsafe header paths gcc/arc-2014.08: add patch to warn about unsafe header paths gcc/4.7: add patch to warn about unsafe header paths
gcc: enable poison system directories option
binutils: enable poison system directories option
Add option for paranoid unsafe path checking

 Config.in                                          |  20 ++
 package/Makefile.in                                |   4 +
 .../2.22/600-poison-system-directories.patch       | 274 ++++++++++++++++++++
 .../2.23.2/600-poison-system-directories.patch     | 279 +++++++++++++++++++++
 .../2.24/600-poison-system-directories.patch       | 279 +++++++++++++++++++++
 .../600-poison-system-directories.patch            | 279 +++++++++++++++++++++
 package/binutils/binutils.mk                       |   1 +
 .../4.7.4/910-gcc-poison-system-directories.patch  | 207 +++++++++++++++
 .../4.8.3/910-gcc-poison-system-directories.patch  | 207 +++++++++++++++
 .../4.9.2/910-gcc-poison-system-directories.patch  | 207 +++++++++++++++
 .../910-gcc-poison-system-directories.patch        | 221 ++++++++++++++++
 package/gcc/gcc-final/gcc-final.mk                 |   1 +
 .../toolchain-external/ext-toolchain-wrapper.c     |  52 ++++
 13 files changed, 2031 insertions(+)
 create mode 100644 package/binutils/2.22/600-poison-system-directories.patch
 create mode 100644 package/binutils/2.23.2/600-poison-system-directories.patch
 create mode 100644 package/binutils/2.24/600-poison-system-directories.patch
 create mode 100644 package/binutils/arc-2014.08/600-poison-system-directories.patch
 create mode 100644 package/gcc/4.7.4/910-gcc-poison-system-directories.patch
 create mode 100644 package/gcc/4.8.3/910-gcc-poison-system-directories.patch
 create mode 100644 package/gcc/4.9.2/910-gcc-poison-system-directories.patch
 create mode 100644 package/gcc/arc-2014.08/910-gcc-poison-system-directories.patch
Signature · 1 line
1.9.3