linux-kernel - Re: Static call dependency on libelf version?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20200915214743.aavqreiw7dh6s3xj@treble>
Date:   Tue, 15 Sep 2020 16:47:43 -0500
From:   Josh Poimboeuf <jpoimboe@...hat.com>
To:     Mark Wielaard <mark@...mp.org>
Cc:     peterz@...radead.org, Hugh Dickins <hughd@...gle.com>,
        linux-kernel@...r.kernel.org, x86@...nel.org
Subject: Re: Static call dependency on libelf version?

On Tue, Sep 15, 2020 at 10:02:31AM -0500, Josh Poimboeuf wrote:
> On Tue, Sep 15, 2020 at 04:38:02PM +0200, Mark Wielaard wrote:
> > Hi Josh,
> > 
> > On Tue, 2020-09-15 at 09:17 -0500, Josh Poimboeuf wrote:
> > > On Tue, Sep 15, 2020 at 01:24:17PM +0200, Mark Wielaard wrote:
> > > > But all this is for ancient versions of elfutils libelf. So it is hard
> > > > to say and my memory might be failing. If someone can confirm 0.158
> > > > (which is 6 years old) works fine I would pick that as minimum version,
> > > > otherwise simply go with 0.168 which is 4 years old and should be on
> > > > most systems by now.
> > > 
> > > I just discovered elf_version(), I assume that would allow us to check
> > > and enforce the libelf version?
> > 
> > No, sorry. That is for the ELF file format version, which is and has
> > always been  version 1 (and I suspect it will be for the next 20
> > years).
> 
> Oh, right :-)
> 
> > There is /usr/include/elfutils/version.h which provides a
> > _ELFUTILS_PREREQ(major, minor) macro if you need something during
> > compile time.
> 
> Nice, I'll try that.

Confirmed that 0.158 fixes it.  I'll enforce that as a minimum.  Thanks!

-- 
Josh