Bug 60084 - [MAINTAINER] lang/pike74: set machine code to off to avoid security bug or exploit
Summary: [MAINTAINER] lang/pike74: set machine code to off to avoid security bug or ex...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Pav Lucistnik
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-12-09 17:40 UTC by Xavier Beaudouin
Modified: 2003-12-19 22:11 UTC (History)
0 users

See Also:

Attachments
pike74-7.4.31_1.patch (1.09 KB, patch)
2003-12-09 17:40 UTC, Xavier Beaudouin 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Xavier Beaudouin 2003-12-09 17:40:09 UTC 
- Fix a security bug in pike when using machine code options.
Machine code puts the machine code in a data segment that can be executable
with mprotect. This option is not forced to be desactivated.

- Force depends of math/libgmp4 for obscure reasons that is not detected
on some systems. See ports/59801.

Generated with FreeBSD Port Tools 0.50
Comment 1 Pav Lucistnik freebsd_committer freebsd_triage 2003-12-09 23:32:05 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->pav

I'll take this.
Comment 2 Pav Lucistnik freebsd_committer freebsd_triage 2003-12-09 23:35:54 UTC 
State Changed
From-To: open->feedback

This does not configure for me (5.2-BETA). Please review 
this fix: 

--- Makefile.yours      Wed Dec 10 00:16:38 2003 
+++ Makefile    Wed Dec 10 00:31:35 2003 
@@ -66,6 +66,8 @@ 
--without-machine-code  
--prefix=${PREFIX} 

+USE_REINPLACE= yes 
+ 
.include <bsd.port.pre.mk> 

PLIST_SUB+=    PORTVERSION=${PORTVERSION} 
@@ -345,6 +347,10 @@ 

pre-configure: 
@${ECHO} ${CONFIGURE_ARGS} 
+ 
+post-patch: 
+       @${REINPLACE_CMD} -e 's| -lgmp| -L${LOCALBASE}/lib -lgmp|'  
+               ${WRKSRC}/modules/Gmp/configure ${WRKSRC}/modules/_Image_XFace/configure 

post-install: 
${INSTALL_PROGRAM} ${WRKSRC}pike ${PREFIX}/bin 


I also believe that adding math/libgmp4 dependency on -stable 
will not fix ports/59801, but instead there will be similar problem 
(configure script can't find -lgmp).
Comment 3 Pav Lucistnik freebsd_committer freebsd_triage 2003-12-19 22:10:52 UTC 
State Changed
From-To: feedback->closed

Committed with modifications, thanks!