[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Installed depends on GCC build directory

From: Alexandre Oliva
Subject: Re: Installed depends on GCC build directory
Date: 11 Sep 2004 04:35:10 -0300
User-agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3

On Sep  8, 2004, Bob Friesenhahn <address@hidden> wrote:

> After installing GCC 3.4.2 today, I see that it still suffers from a
> libtool bug which may upset builds unless the GCC build directory is
> removed.  I have reported this bug to the GCC bug tracking system:

It's not exactly a bug.  The problem is that libtool can't tell that
some directory needed to bring in dep libs is to be used only at build
time.  We need some mechanism to tell libtool to strip certain
directories from the installable .la file, something like -<option>
/dir, that would omit options such as -L/dir and -L/dir/* specified in
the command line into the build-time .la file, but not into the
installable one.

I suspect this problem affects many packages that rely on libtool's
ability to resolve libtool dep libs given as -Ldir -lib, instead of as

This happens to be a security issue, since if the build tree is
removed and anyone can recreate the same tree (think
/tmp/build/gcc/...), all you have to do is create some libraries with
carefully-chosen names in there and wait for someone to link a C++
program using libtool and run it.

Alexandre Oliva   
Red Hat Compiler Engineer   address@hidden,}
Free Software Evangelist  address@hidden,}

reply via email to

[Prev in Thread] Current Thread [Next in Thread]