Message 128293 - Python tracker

➜

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

In-reply-to
Author	haubi
Recipients	haubi
Date	2011年02月10日.14:02:59
SpamBayes Score	1.460478e-07
Marked as misclassified	No
Message-id	<1297346581.12.0.969527890029.issue11172@psf.upfronthosting.co.za>

Content
Spotted in issue#941346 msg#128214, the "-L$(srcdir)" should be removed from BLDSHARED on AIX: The problem is that '-L$(srcdir)' adds '$(srcdir)' to the runpath too (as there is no '-blibpath' argument), opening a security hole for libpythonX.Y.so as well as the modules.so. As LDLIBRARY points to the immediate file 'libpython$(VERSION).so' instead of '-lpython$(VERSION)', I don't see the need for '-L$(srcdir)' at all.

Content

Spotted in issue#941346 msg#128214, the "-L$(srcdir)" should be removed from BLDSHARED on AIX:
The problem is that '-L$(srcdir)' adds '$(srcdir)' to the runpath too (as there is no '-blibpath' argument), opening a security hole for libpythonX.Y.so as well as the modules.so.
As LDLIBRARY points to the immediate file 'libpython$(VERSION).so' instead of '-lpython$(VERSION)', I don't see the need for '-L$(srcdir)' at all.

History
Date	User	Action	Args
2011年02月10日 14:03:01	haubi	set	recipients: + haubi
2011年02月10日 14:03:01	haubi	set	messageid: <1297346581.12.0.969527890029.issue11172@psf.upfronthosting.co.za>
2011年02月10日 14:02:59	haubi	link	issue11172 messages
2011年02月10日 14:02:59	haubi	create

homepage