diff options
| author | Florian Weimer <fweimer@redhat.com> | 2017-12-18 20:04:13 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2017-12-18 20:04:13 +0100 |
| commit | 8e1472d2c1e25e6eabc2059170731365f6d5b3d1 (patch) | |
| tree | 5b29308e6b00178a34422b6f7bb7b4f9252801dc /dlfcn/dlmopen.c | |
| parent | 49b036bce9f021ae994a85aee8b410d20b29c8b7 (diff) | |
| download | glibc-8e1472d2c1e25e6eabc2059170731365f6d5b3d1.tar glibc-8e1472d2c1e25e6eabc2059170731365f6d5b3d1.tar.gz glibc-8e1472d2c1e25e6eabc2059170731365f6d5b3d1.tar.bz2 glibc-8e1472d2c1e25e6eabc2059170731365f6d5b3d1.zip | |
ld.so: Examine GLRO to detect inactive loader [BZ #20204]
GLRO (_rtld_global_ro) is read-only after initialization and can
therefore not be patched at run time, unlike the hook table addresses
and their contents, so this is a desirable hardening feature.
The hooks are only needed if ld.so has not been initialized, and this
happens only after static dlopen (dlmopen uses a single ld.so object
across all namespaces).
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
Diffstat (limited to 'dlfcn/dlmopen.c')
| -rw-r--r-- | dlfcn/dlmopen.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/dlfcn/dlmopen.c b/dlfcn/dlmopen.c index 07d59ade30..58f88bb7c6 100644 --- a/dlfcn/dlmopen.c +++ b/dlfcn/dlmopen.c @@ -79,7 +79,7 @@ void * __dlmopen (Lmid_t nsid, const char *file, int mode DL_CALLER_DECL) { # ifdef SHARED - if (__glibc_unlikely (_dlfcn_hook != NULL)) + if (!rtld_active ()) return _dlfcn_hook->dlmopen (nsid, file, mode, RETURN_ADDRESS (0)); # endif |