Bug#837562: Pending fixes for bugs in the libembperl-perl package

pkg-perl-maintainers at lists.alioth.debian.org pkg-perl-maintainers at lists.alioth.debian.org
Fri Oct 21 23:45:57 UTC 2016


tag 837562 + pending
thanks

Some bugs in the libembperl-perl package are closed in revision
541b0e9c6d9f88c7ca1929866d2e7effd13c388f in branch 'master' by
Florian Schlichting

The full diff can be seen at
https://anonscm.debian.org/cgit/pkg-perl/packages/libembperl-perl.git/commit/?id=541b0e9

Commit message:

    Opt out of bindow (closes: #837562)
    
    quoting Niko from the bug:
    
    My understanding is that the Apache module parts (mod_embperl) get
    compiled into Embperl.so, but don't get used unless the thing is loaded
    by Apache. The 'bindnow' hardening is incompatible with this scheme;
    from the ld(1) documentation for '-z now':
    
      When generating an executable or shared library, mark it to tell the
      dynamic linker to resolve all symbols when the program is started, or
      when the shared library is linked to using dlopen, instead of deferring
      function call resolution to the point when the function is first called.
    
    So when perl dlopens Embperl.so without Apache, the ap_* functions
    aren't needed but still get loaded (unsuccessfully).



More information about the pkg-perl-maintainers mailing list