On Mon, Sep 7, 2026, at 2:20 PM, Florian Weimer via devel wrote:

>  000000000001e740 <putenv>:
> -   1e740:    f3 0f 1e fa             endbr64
> +   1e740:    cc                      int3
> +   1e741:    0f 1e fa                nop    %edx
>     1e744:    55                      push   %rbp
>     1e745:    be 3d 00 00 00          mov    $0x3d,%esi
>     1e74a:    48 89 e5                mov    %rsp,%rbp
> @@ -33543,7 +33544,8 @@
>     2027b:    0f 1f 44 00 00          nopl   0x0(%rax,%rax,1)
> 
>  0000000000020280 <setenv>:
> -   20280:    f3 0f 1e fa             endbr64
> +   20280:    cc                      int3
> +   20281:    0f 1e fa                nop    %edx
>     20284:    55                      push   %rbp
>     20285:    48 89 e5                mov    %rsp,%rbp
>     20288:    48 83 ec 20             sub    $0x20,%rsp
> @@ -33675,7 +33677,8 @@
>     2047c:    00 00 00 00 
> 
>  0000000000020480 <clearenv>:
> -   20480:    f3 0f 1e fa             endbr64
> +   20480:    cc                      int3
> +   20481:    0f 1e fa                nop    %edx
>     20484:    55                      push   %rbp
>     20485:    31 c0                   xor    %eax,%eax
>     20487:    ba 01 00 00 00          mov    $0x1,%edx

What does this do? It seems to SIGTRAP any call to environment modifying
functions, is something listening to those as "runtime integrity" protection
(or snooping) and if so what is that?
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to