Rich Felker on Nostr: Aside from the IFUNC mechanism (which #musl doesn't and won't support, btw), the one ...
Aside from the IFUNC mechanism (which #musl doesn't and won't support, btw), the one way for libraries that get linked but not used to run code is as global constructors.
Wouldn't it be nice if distros could just audit for which libs have global ctors, and apply greater scrutiny to pulling ones that do into sensitive programs?
Well...
🧵
Published at
2024-04-01 15:01:08Event JSON
{
"id": "359039c83720dff38f649237e7bdfdf9afc2c0d149063e5638b0cbe184f7193b",
"pubkey": "d0d29fd9819bb2d14b5a485e42e4ef1c559ba30e320f3b3e54785aa2ffc5974f",
"created_at": 1711983668,
"kind": 1,
"tags": [
[
"t",
"musl"
],
[
"proxy",
"https://hachyderm.io/users/dalias/statuses/112196561657811805",
"activitypub"
]
],
"content": "Aside from the IFUNC mechanism (which #musl doesn't and won't support, btw), the one way for libraries that get linked but not used to run code is as global constructors.\n\nWouldn't it be nice if distros could just audit for which libs have global ctors, and apply greater scrutiny to pulling ones that do into sensitive programs?\n\nWell...\n\n🧵",
"sig": "f10744f15b309a329e47570055a16c294b78506b2850314878f1ade4a36bf6f418e14ef904ffc94c9e210abf7d809e9437bd28ac6a167e2b71d10247b2257ec9"
}
