openssl, SSL2, KDE

Jakub Bogusz qboosh at pld-linux.org
Sat Mar 5 08:33:59 CET 2016


On Sat, Mar 05, 2016 at 12:14:35AM +0200, Elan Ruusamäe wrote:
> and not sure it is correct scanning, as wget works without being rebuilt:
> 
> # objdump -T /lib64/libcrypto.so.1.0.0|grep SSLv2
> 0000000000106c00 g    DF .text  00000000000000e1  Base        
> RSA_padding_add_SSLv23
> 0000000000106cf0 g    DF .text  0000000000000170  Base        
> RSA_padding_check_SSLv23

BTW: SSLv23_* exist in libssl, not libcrypto.

> # objdump -T /usr/bin/wget |grep SSLv2
> 0000000000000000      DF *UND*  0000000000000000              
> SSLv23_client_method
> 0000000000000000      DF *UND*  0000000000000000              
> SSLv2_client_method
> 
> # wget --version|head -n1
> GNU Wget 1.16.3 built on linux-gnu.

E.g. links2 (and probably wget too) uses lazy binding, so it crashes
only when trying to use removed function.


-- 
Jakub Bogusz    http://qboosh.pl/


More information about the pld-devel-en mailing list