From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FROM,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 802 invoked from network); 17 Sep 2021 13:56:44 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 17 Sep 2021 13:56:44 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20210803; t=1631887004; b=jdXKCX2J4dFgIoN8BEt8bwR7PFCKxr1AQlbhHQ1U+UUu4LEe6kkC+o+m11CKiag67iKosen4Jf 2d+uR1Ga49s0Ezq9Nb8Zogj0ZXB83/FzNU4D6j/0sICv7uRH8f3m5/yavb7H2fiD9BPfs0/TyN nti5zmce7IiPqYIAV0ge0McTWOLLOk566nEuruEEsHaqoqUDLWaV8ClXWLqKcRhogC1HRyRNxT kH9u1d+zjYOR8csHrdHjDomu1a1ItO6d/buAPTQ/6FYTZ+9V+Z1noI+rIGnvhuu0eF8b383YO8 zwH5DS4pde8Ja/RQppTiyvMmFMVsj4RXUfOZ71KT3N4MaA==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (mail-qk1-f179.google.com) smtp.remote-ip=209.85.222.179; dkim=pass header.d=gmail.com header.s=20210112 header.a=rsa-sha256; dmarc=pass header.from=gmail.com; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20210803; t=1631887004; bh=Elkz59A20TnRm03ZxsScc53TD5IL9BwdzwPI9idCebM=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Type:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:DKIM-Signature:DKIM-Signature; b=fpg9ir6kmRz9xmXSZJsaVx5+PVwkk8sdIfmAwELIYovpvp+CFKXYIpHnaSgWa300izYiZ4vUau Uk76Ee+zqI2iQRsPItV9PTIgdeM2ToRnZM587Lbmfx2JYtMOka8WNLPkwbx+ZWPXULMwqh/OeO YoOZ7+UDgyGKgMWNDX7T9YNr6ljfay7HdkukwhCbfwDVObgjrszJSROU2lTCPQDT+v3QslPSvj RnWNba6HLMFd1Bq/kPqcohbhaxk428gNoGrHqkkd4cxeu2SFiJnCooK+iQPpjjOMabaHQS7LD5 fn6WvjCkXDmxgxOGgIrA5l7IlmwVOVokb+aP8r4Pi4sAkw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20210803; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Type:To:Subject:Message-ID: Date:From:In-Reply-To:References:MIME-Version:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=Elkz59A20TnRm03ZxsScc53TD5IL9BwdzwPI9idCebM=; b=MkvZGf6R3b8KZac0VQPWmLsUkp g2Aqb0KQO36zS3jiFHGXiqgkxzEJ3yoPLbI4wlZRWE6pzFrGCLI3dOKRFdE255T/6uKN4VhcgZnld l0H37ygVKzz2XZz2C7IpnOIgVL7wO8g/JN+NLzGb6IstElTZHX+tR/4cMYqkbeU2s/N8ydenNOyFK FUIDSSbu90XLN78gm2KYR6FoWH8rkLk2lreQzybLysm3mq6aJKfWw+4Q4hAxqX8k7YSQnVdlq9btv ZVU8O/bXubFN8aORkswK6jEySYA4MXkpWxIPpKyMiV95rpens3mxbGaWM+pPez1szJESOq6pV8Tl0 lB7XRBqg==; Received: from authenticated user by zero.zsh.org with local id 1mREM8-000Djy-5e; Fri, 17 Sep 2021 13:56:44 +0000 Authentication-Results: zsh.org; iprev=pass (mail-qk1-f179.google.com) smtp.remote-ip=209.85.222.179; dkim=pass header.d=gmail.com header.s=20210112 header.a=rsa-sha256; dmarc=pass header.from=gmail.com; arc=none Received: from mail-qk1-f179.google.com ([209.85.222.179]:41825) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_128_GCM_SHA256:128) id 1mRELM-000DPG-OU; Fri, 17 Sep 2021 13:55:57 +0000 Received: by mail-qk1-f179.google.com with SMTP id bk29so17630754qkb.8 for ; Fri, 17 Sep 2021 06:55:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=Elkz59A20TnRm03ZxsScc53TD5IL9BwdzwPI9idCebM=; b=hSRNUuvgui16FS0ExNmzyG1AdmE41JHs28ZgrXB//RNSYu+SGH9Z3UU1WjGf1rb5m/ Msnn1euAV3pByFiuIk7MKAhzmKSK9l4ESvN12sgXv8yaZ0ZodjoHn6cK8m30k/JPpCHn 8/6GyJWeUi7nE8qmVmA1OarzhcWjqGPLumicef1MlUMkiUB4BsTaCRBonynn4aX/Y7Hl blLFBe7l4yuJ4bawxO5E8gHwkqd0T9RFjZ6bm4VLUFV5FQJAtQoBWOkb8Pp18QZuMtyz 408DsMUlkW/YxxyOMSVW5lz5c/lZdAixq8wdNbxVQdv8kMxFIApDZk3z26HZqTXIK9BQ Cyog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=Elkz59A20TnRm03ZxsScc53TD5IL9BwdzwPI9idCebM=; b=s6D3d+jgZr4IfPAwIDlaurkpMQHkGPJND9dDSKHcMlcjcUpro6zR4DFuBmkJlJvXCs bH7vBYXNVHMU51HMwaBFv+Pn67wodLnvUuL+UcGURhTObtBrHxLNfw+3Kb5J5QeVL9TM 5k/bQ2hU2CGHNvbi6oUd+9rQ3DVPnE90B7rdGYC//rtfCWpkYRjpS+mecKrZYWtqn2uX l2TL9jry1CXJsiEEgr4MdO+BqrrRtq7ROApf69Guad1sMNHI8zoWItMZuxmR46iA7CjI ZJnJxdjnOKkmxUSbPMjuFo+1Pc5OJOeAuONePQp9h0NmLCT9HLBe2BUJ8DeTcd/2/Y+w UVUw== X-Gm-Message-State: AOAM532mkbKZNua4e9+dzgiKI/NACzbmti0GfMr/N86F+Z7OgQ5frq7g HIF4O6onVGJrL7CHMIn+RmI1QiljHk6ISjSNhx7U2DC9 X-Google-Smtp-Source: ABdhPJysfVAbOngXIGxVyveZHa1gYRarBP+GnT3OVuGoP/pA/yGJm5Wxk55qjIjev/jIyWoYWwhXMCZ0JXUJLk6jc5s= X-Received: by 2002:a37:9244:: with SMTP id u65mr10957114qkd.46.1631886955200; Fri, 17 Sep 2021 06:55:55 -0700 (PDT) MIME-Version: 1.0 References: <20210908011251.GA2387366@zira.vinc17.org> <20210915143102.pw5uup7bvufi7wse@sym.noone.org> <887BC7E8-0D19-4D16-BFE6-9AE8EA5E9040@kba.biglobe.ne.jp> <20210916121056.p4zainnlnoi74yiw@sym.noone.org> <799F2EE5-EB83-49FB-9E5F-6C20CAB4CA6B@kba.biglobe.ne.jp> <20210917134439.l7yxmbp4ewajvjau@sym.noone.org> In-Reply-To: <20210917134439.l7yxmbp4ewajvjau@sym.noone.org> From: Roman Perepelitsa Date: Fri, 17 Sep 2021 15:55:43 +0200 Message-ID: Subject: Re: [BUG] With --disable-dynamic-nss, not all functions calls are protected To: Zsh hackers list Content-Type: text/plain; charset="UTF-8" X-Seq: 49425 Archived-At: X-Loop: zsh-workers@zsh.org Errors-To: zsh-workers-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-workers-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: On Fri, Sep 17, 2021 at 3:45 PM Axel Beckert wrote: > > Hi, > > On Fri, Sep 17, 2021 at 05:45:37PM +0900, Jun T wrote: > > > I guess the problem is getlogin() called from createparamtable(). > > > > Yes, this can be confirmed by statically linking a test program > > (just call getlogin() and exit). I _hope_ there are no other places > > where NSS-functions are indirectly called. > > > > Revised the Axel's patch (also attached a file): > > Yay, this patch works for me! zsh-static built on Debian Unstable > (glibc 2.32) no more segfaults when copied to and executed on Debian > 11 Bullseye (glibc 2.31) for me. If your goal is to create a binary that runs on any Linux x64 box regardless of libc runtimes that may or may not be available on it, link against musl libc. Static linking against glibc is a lost cause. Zsh can link against musl libc out of the box. This is how I build mine. Roman.