Page MenuHomePhabricator

[backport] Scripts and tools: Fix BIND_NOW check in security-check.py
ClosedPublic

Authored by majcosta on Apr 13 2020, 16:23.

Details

Summary

37d363dd4acf7d41196d44b295593019add241c3 Tools: fix BIND_NOW check in security-check.py (Conrado Gouvea)

Pull request description:

Previously, the BIND_NOW check would work only if it was the first value in FLAGS.

Tree-SHA512: 39cd83f673a6b521803be5585ada516f2db4eede718f0c5aea3377825ed1adcefed5bbb41dd9a5f24a26f7d27116cfc81bde7e26283232593b72768c5ae3d321


This is a backport of Core PR13647

Test Plan

compile a "Hello, world!" C program with both:

gcc helloworld.c -o test_normal
gcc -Wl,-z,now -fstack-protector-all helloworld.c -o test_bindnow_canary

running ./security-check.py test_normal returns test_normal: failed RELRO Canary
running ./security-check.py test_bindnow_canary returns nothing

Diff Detail

Repository
rABC Bitcoin ABC
Branch
fix_bind_now
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 10191
Build 18208: Default Diff Build & Tests
Build 18207: arc lint + arc unit

Event Timeline

Owners added a reviewer: Restricted Owners Package.Apr 13 2020, 16:23

[Bot Message]
One or more PR numbers were detected in the summary.
Links to those PRs have been inserted into the summary for reference.

This revision is now accepted and ready to land.Apr 13 2020, 17:38
deadalnix requested changes to this revision.Apr 13 2020, 17:38

The test plan is not appropriate.

This revision now requires changes to proceed.Apr 13 2020, 17:38
majcosta edited the test plan for this revision. (Show Details)

corrected test plan

This revision is now accepted and ready to land.Apr 13 2020, 22:29