Hi again,

On 10/22/07, Simon Vallet <[EMAIL PROTECTED]> wrote:
>
> As mentioned, I don't have access to the box or the build log right
> now, but I think -Wa,--noexecstack was indeed specified in configure,
> and I think the generated .so do in fact contain text relocs. I will
> check this manually (readelf -r) tonight and post the relevant info

OK, now I have some more info -- it appears you were right and there
actually aren't any relocations in the .text section : the text section starts
@0x45940, size 0xcd374, and all relocations concern offsets beginning
at 0x131020 (.data.rel.ro)

So the eu-findreltext tool must have been abused by the presence of a
TEXTREL line in readelf -d output, even if it's value is 0. For reference :

[EMAIL PROTECTED]:~$ eu-findtextrel
/usr/src/openssl-0.9.8e/i686/cmov/libcrypto.so.0.9.8
/usr/src/openssl-0.9.8e/crypto/x86cpuid-elf.s not compiled with -fpic/-fPIC
/usr/src/openssl-0.9.8e/crypto/des/dx86-elf.s not compiled with -fpic/-fPIC
/usr/src/openssl-0.9.8e/crypto/aes/ax86-elf.s not compiled with -fpic/-fPIC
/usr/src/openssl-0.9.8e/crypto/bf/bx86-elf.s not compiled with -fpic/-fPIC
[EMAIL PROTECTED]:~$

But the -Wa,--noexecstack option was indeed specified during compilation;
here is an excerpt of the build log  (sorry for the formating):
[EMAIL PROTECTED]:~$ grep dx86-elf.s ~/openssl-build-LOG
[...]
(cd asm; /usr/bin/perl des-586.pl elf -I.. -I../.. -I../../include
-fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686 -Wa,--noexecstack
-g -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM
-DMD5_ASM -DRMD160_ASM -DAES_ASM > ../dx86-elf.s)

gcc -I.. -I../.. -I../../include -fPIC -DOPENSSL_PIC -DZLIB
-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN
-DTERMIO -O3 -march=i686 -Wa,--noexecstack -g -Wall
-DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM
-DRMD160_ASM -DAES_ASM -c  -o dx86-elf.o dx86-elf.s

[EMAIL PROTECTED]:~$

So the question is : where could this error (execmod) come from ?

Simon


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to