Opened 2 months ago

Last modified 2 months ago

#23800 new defect

Loading shared object files from world writable directories

Reported by: arlolra Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Messenger Version:
Severity: Normal Keywords:
Cc: sukhbir, boklm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Child Tickets

TicketStatusOwnerSummaryComponent
#23806closedlibotr.so and libgcrypt.so are using RPATHApplications/Tor Messenger

Change History (3)

comment:1 Changed 2 months ago by arlolra

Cc: boklm added

comment:2 Changed 2 months ago by boklm

$ readelf -d instantbird | grep runpath
 0x000000000000001d (RUNPATH)            Library runpath: [/var/tmp/dist/selfrando/out/x86_64/bin]
$ readelf -d ./TorBrowser/Data/Browser/profile.default/extensions/ctypes-otr@tormessenger/chrome/content/libgcrypt.so.20.0.6 | grep RPATH                                                                                                                                                              
 0x000000000000000f (RPATH)              Library rpath: [/var/tmp/dist/libgpg-error/lib]

comment:3 Changed 2 months ago by boklm

I created #23806 for the RPATH in libotr and libgcrypt.

The RUNPATH in instantbird is probably the same as #22242.

Note: See TracTickets for help on using tickets.