1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
#/bin/sh
#
# This script is used to validate the shared libraries
#
# Authors: FoundationDB team, https://github.com/apple/foundationdb/blame/master/build/link-validate.sh
# License: Apache License 2.0
verlte() {
[ "$1" = "`echo -e "$1\n$2" | sort -V | head -n1`" ]
}
ALLOWED_SHARED_LIBS=("libdl.so.2" "libpthread.so.0" "librt.so.1" "libm.so.6" "libc.so.6" "ld-linux-x86-64.so.2")
if [ "$#" -lt 1 ]; then
echo "USAGE: link-validate.sh BINNAME GLIBC_VERSION"
exit 1
fi
# Step 1: glibc version
for i in $(objdump -T "$1" | awk '{print $5}' | grep GLIBC | sed 's/ *$//g' | sed 's/GLIBC_//' | sort | uniq); do
if ! verlte "$i" "${2:-2.10}"; then
echo "Dependency on newer libc detected: $i"
exit 1
fi
done
# Step 2: Other dynamic dependencies
for j in $(objdump -p "$1" | grep NEEDED | awk '{print $2}'); do
PRESENT=0
for k in ${ALLOWED_SHARED_LIBS[@]}; do
if [[ "$k" == "$j" ]]; then
PRESENT=1
break
fi
done
if ! [[ $PRESENT == 1 ]]; then
echo "Unexpected shared object dependency detected: $j"
exit 1
fi
done
|
