Re: Fixing the glibc runtime linker

[Paul Pluzhnikov <ppluzhnikov () google com>]

On Thu, Feb 19, 2015 at 11:57 PM, Rich Felker <dalias () libc org> wrote:

> How is an empty or relative rpath easy?

all: foo
foo: foo.c
        ${CC} -Wl,-rpath=${VAR} -o $@ $^


If VAR is unset, or set to relative path, resulting binary will be "bad".

Quoting original Tim's message:

> Over the last couple of years I've spent a good deal of time dealing with
> vendors who, for one reason or another have shipped binaries where it is
> possible to inject "untrusted" code into running processes, notably but not
> exclusively via DT_RPATH.

I can easily believe that such binaries are fairly common.



-- 
Paul Pluzhnikov