mirror of
https://github.com/opnsense/src.git
synced 2026-06-08 16:22:46 -04:00
e92ffd9b62
Notable upstream pull request merges:
#12766 Fix error propagation from lzc_send_redacted
#12805 Updated the lz4 decompressor
#12851 FreeBSD: Provide correct file generation number
#12857 Verify dRAID empty sectors
#12874 FreeBSD: Update argument types for VOP_READDIR
#12896 Reduce number of arc_prune threads
#12934 FreeBSD: Fix zvol_*_open() locking
#12947 lz4: Cherrypick fix for CVE-2021-3520
#12961 FreeBSD: Fix leaked strings in libspl mnttab
#12964 Fix handling of errors from dmu_write_uio_dbuf() on FreeBSD
#12981 Introduce a flag to skip comparing the local mac when raw sending
#12985 Avoid memory allocations in the ARC eviction thread
Obtained from: OpenZFS
OpenZFS commit: 17b2ae0b24
43 lines
1.2 KiB
Bash
Executable file
43 lines
1.2 KiB
Bash
Executable file
#!/bin/sh
|
|
|
|
if ! command -v scanelf > /dev/null; then
|
|
echo "scanelf (from pax-utils) is required for these checks." >&2
|
|
exit 3
|
|
fi
|
|
|
|
RET=0
|
|
|
|
# check for exec stacks
|
|
OUT=$(scanelf -qyRAF '%e %p' "$1")
|
|
|
|
if [ x"${OUT}" != x ]; then
|
|
RET=2
|
|
echo "The following files contain writable and executable sections"
|
|
echo " Files with such sections will not work properly (or at all!) on some"
|
|
echo " architectures/operating systems."
|
|
echo " For more information, see:"
|
|
echo " https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart"
|
|
echo
|
|
echo "${OUT}"
|
|
echo
|
|
fi
|
|
|
|
|
|
# check for TEXTRELS
|
|
OUT=$(scanelf -qyRAF '%T %p' "$1")
|
|
|
|
if [ x"${OUT}" != x ]; then
|
|
RET=2
|
|
echo "The following files contain runtime text relocations"
|
|
echo " Text relocations force the dynamic linker to perform extra"
|
|
echo " work at startup, waste system resources, and may pose a security"
|
|
echo " risk. On some architectures, the code may not even function"
|
|
echo " properly, if at all."
|
|
echo " For more information, see:"
|
|
echo " https://wiki.gentoo.org/wiki/Hardened/HOWTO_locate_and_fix_textrels"
|
|
echo
|
|
echo "${OUT}"
|
|
echo
|
|
fi
|
|
|
|
exit "$RET"
|