Package: libffcall1
Version: 1.10+2.41-3
Severity: normal

These commands show both shared objects provided by libffcall1 to need an
executable stack.

bounty:/usr/lib# readelf -l /usr/lib/libcallback.so.0.0.0 | grep STACK
  GNU_STACK      0x0000000000000000 0x0000000000000000 0x0000000000000000
bounty:/usr/lib# readelf -l /usr/lib/libavcall.so.0.0.0 | grep STACK
  GNU_STACK      0x0000000000000000 0x0000000000000000 0x0000000000000000

I believe that this is a mistake and is an issue on SELinux systems since it
requires lowering security protections.

Please see http://people.redhat.com/drepper/nonselsec.pdf for more information.


I tried running execstack -c on the the files in question and it worked. This is
not the best solution since execstack does not exist on all platforms and
because the issue should really be fixed in the source.


--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.21-2-amd64

Debian Release: lenny/sid
  900 testing         www.emdebian.org
  900 testing         snapshot.debian.net
  900 testing         security.debian.org
  900 testing         ftp.ro.debian.org
   10 unstable        ftp.ro.debian.org

--- Package information. ---
Depends         (Version) | Installed
=========================-+-=============
libc6        (>= 2.3.5-1) | 2.6.1-1


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to