Date: Wed, 26 Mar 2003 08:38:14 -0600 From: D J Hawkey Jr <hawkeyd@visi.com> To: "Jacques A. Vidrine" <nectar@FreeBSD.org>, Simon Barner <barner@in.tum.de>, "Jeremy C. Reed" <reed@reedmedia.net>, security at FreeBSD <freebsd-security@FreeBSD.org> Subject: Re: what actually uses xdr_mem.c? Message-ID: <20030326083814.E17610@sheol.localdomain> In-Reply-To: <20030326141024.GD33671@madman.celabo.org>; from nectar@FreeBSD.org on Wed, Mar 26, 2003 at 08:10:24AM -0600 References: <Pine.LNX.4.43.0303252144400.21019-100000@pilchuck.reedmedia.net> <20030326102057.GC657@zi025.glhnet.mhn.de> <20030326061041.A17052@sheol.localdomain> <20030326141024.GD33671@madman.celabo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mar 26, at 08:10 AM, Jacques A. Vidrine wrote:
>
> On Wed, Mar 26, 2003 at 06:10:41AM -0600, D J Hawkey Jr wrote:
> >
> > find $DIR -type f \
> > |xargs readelf -a 2>/dev/null \
> > |awk '/^File:/ { name = $2; printed = 0; } \
> > /XDR|xdr/ { if (!printed) { print name; printed = 1; } }' \
> > |xargs ldd 2>/dev/null
> >
> > If it reports a pathed file without listing any shared libraries, then
> > it is statically-linked.
>
> This approach won't work for static binaries (which is what the poster
> was inquiring about).
So someone else has proven to me.
> It also will fail you in this case. Since (most) affected binaries do
> not call xdrmem_* directly, those names will not appear in the
> binaries' symbol tables. (Although related names might, which may or
> may not be enough for you to go on.)
As I replied to him, thanks for hitting me with the Clue Stick.
Are my posts _really_ making it to freebsd-security? The archive web
page shows nothing at all for today, majordomo says I'm not subscribed
anymore, yet I'm getting replies from folk I haven't sent to directly.
If not, I suppose I'll have to re-post my replies? Maybe after trying
to re-subscribe?
stumblemumblegrumble
Dave
--
______________________ ______________________
\__________________ \ D. J. HAWKEY JR. / __________________/
\________________/\ hawkeyd@visi.com /\________________/
http://www.visi.com/~hawkeyd/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030326083814.E17610>