tags 574284 wontfix thanks Hi Hilko,
Wireshark's more than one million lines in C and the typical use case of analyzing untrusted network traffic makes hardening a must. Gdb-s current inability of handling PIE does not justify dropping this feature of hardening and hopefully 7.1 will be released soon with PIE support. I'm against providing -dbg because debugging even without -dbg is simple enough and -dbg would take additional space on the mirrors/take more time to build, etc. I'll reconsider this decision when upstream makes Wireshark more parallel, thus increasing the probability of having bugs hard to debug. I think this bug kept as wontfix is a good place for documenting the way of making backtraces for wireshark by applying your patch. Cheers, Balint 2010/3/17 Hilko Bengen <[email protected]>: > Package: wireshark > Version: 1.2.6-5 > Severity: wishlist > Tags: patch > > When investigating #574086 which I reported yesterday, I first tried > adding a -dbg to the locally built package. However, I found that gdb is > quite useless for the executables built from the wireshark source > package: > > ,---- > | warning: The current binary is a PIE (Position Independent Executable), > which > | GDB does NOT currently support. Most debugger features will fail if used > | in this session. > `---- > > gdb isn't even able to resolve the debug symbols for printing a > backtrace... > > After a lot of wasted time looking at the build system's output, it > finally dawned on me that usage of hardening-wrapper was the cause for > these "weird" executables. > > Apparently, patches for gdb have existed for a while that enable it to > deal with position-independent executables, and they may even end up in > version 7.1 of gdb which might even be released before squeeze is > frozen. > > Shipping debugging symbols and building wireshark in a way that makes it > possible or easier to use those would greatly benefit users. (I am > certain that this would have saved me a _lot_ of time.) > > Please consider shipping a -dbg package > > Please consider disabling PIEs until we (Debian) have a debugger that > can handle those. > > Thanks, > -Hilko -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
