1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
# binaries/static -- lintian check script -*- perl -*-
# Copyright (C) 1998 Christian Schwarz and Richard Braakman
# Copyright (C) 2012 Kees Cook
# Copyright (C) 2017-2020 Chris Lamb <lamby@debian.org>
# Copyright (C) 2021 Felix Lechner
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, you can find it on the World Wide
# Web at https://www.gnu.org/copyleft/gpl.html, or write to the Free
# Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,
# MA 02110-1301, USA.
package Lintian::Check::Binaries::Static;
use v5.20;
use warnings;
use utf8;
use Moo;
use namespace::clean;
with 'Lintian::Check';
has built_with_golang => (
is => 'rw',
lazy => 1,
default => sub {
my ($self) = @_;
my $built_with_golang = $self->processable->name =~ m/^golang-/;
my $source = $self->group->source;
$built_with_golang
= $source->relation('Build-Depends-All')
->satisfies('golang-go | golang-any')
if defined $source;
return $built_with_golang;
}
);
sub visit_installed_files {
my ($self, $item) = @_;
return
if $self->processable->type eq 'udeb';
return
unless $item->is_file;
return
unless $item->file_type =~ /^ [^,]* \b ELF \b /x;
return
unless $item->file_type =~ m{ executable | shared [ ] object }x;
my $is_shared = $item->file_type =~ m/(shared object|pie executable)/;
# Some exceptions: files in /boot, /usr/lib/debug/*,
# named *-static or *.static, or *-static as
# package-name.
# Binaries built by the Go compiler are statically
# linked by default.
# klibc binaries appear to be static.
# Location of debugging symbols.
# ldconfig must be static.
$self->pointed_hint('statically-linked-binary', $item->pointer)
if !$is_shared
&& !exists $item->elf->{NEEDED}
&& $item->name !~ m{^boot/}
&& $item->name !~ /[\.-]static$/
&& $self->processable->name !~ /-static$/
&& !$self->built_with_golang
&& (!exists $item->elf->{INTERP}
|| $item->elf->{INTERP} !~ m{/lib/klibc-\S+\.so})
&& $item->name !~ m{^usr/lib/debug/}
&& $item->name ne 'sbin/ldconfig';
return;
}
1;
# Local Variables:
# indent-tabs-mode: nil
# cperl-indent-level: 4
# End:
# vim: syntax=perl sw=4 sts=4 sr et
|
