On Mon, Apr 14, 2008 at 11:43 PM, <[EMAIL PROTECTED]> wrote:
> The executable was built with perl 5.8.6.
There might have been some changes between 5.8.6 and 5.10.0 to DynaLoader,
but I doubt that this would influence library search order for libraries
thar are indirectly loaded by the system runtime linker.
...
> But it failed to find it:
>
> 10880 stat64("/tmp/par-netadmin/cache-
> ed41b9f9ecb8047fb149dc3bb6cffa5d265bb21d/8f7ed037.bs", 0x8126dc0) = -1
>
> ENOENT (No such file or directory)
> 10880 open("/tmp/par-netadmin/cache-
> ed41b9f9ecb8047fb149dc3bb6cffa5d265bb21d/8f7ed037.so", O_RDONLY) = 9
I guess that this is actually the perl glue library LibXML.so? What's
the output of
readelf -d .../8f7ed037.so
For good measure also run readelf on the actual executable in the
cache directory
(it has the same name as your pp'ed executable, but is different) and the
shared libperl.so in thre (if there is such a thing, might be called
something like
libperl.so.5.8 or libperl58.so).
> 10880 open("/usr/lib/tls/i686/mmx/libxml2.so.2", O_RDONLY) = -1 ENOENT
>
> (No such file or directory)
> 10880 stat64("/usr/lib/tls/i686/mmx", 0xbfff8e3c) = -1 ENOENT (No such
> file or directory)
> 10880 open("/usr/lib/tls/i686/libxml2.so.2", O_RDONLY) = -1 ENOENT (No
> such file or directory)
> 10880 stat64("/usr/lib/tls/i686", 0xbfff8e3c) = -1 ENOENT (No such
> file or directory)
...
Looks like using the built-in library search path, ignoring LD_LIBRARY_PATH.
Is this packed executable perhaps running setuid?
Cheers, Roderich
