Bug 2216763 - Change Proposal Name Changes/LIBFFI_34_static_trampolines
Summary: Change Proposal Name Changes/LIBFFI_34_static_trampolines
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: 39
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: DJ Delorie
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: F39Changes
TreeView+ depends on / blocked
 
Reported: 2023-06-22 13:37 UTC by Aoife Moloney
Modified: 2023-11-14 18:57 UTC (History)
3 users (show)

Fixed In Version: libffi-3.4.4-3.fc39
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-11-14 18:57:27 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Aoife Moloney 2023-06-22 13:37:07 UTC
This is a tracking bug for Change: Change Proposal Name Changes/LIBFFI_34_static_trampolines
For more details, see: https://fedoraproject.org/wiki/Changes/LIBFFI34_static_trampolines

Libffi is currently configured to use dynamic trampolines, which require some source of memory which is both writable and executable.  This is an obvious security issue, and selinux and system defaults have made it more and more difficult to safely provide this memory to libffi clients.  With this change, libffi will be configured to use static trampolines, which do not require such memory, and will not pose those security and administrative risks.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Adam Williamson 2023-08-21 22:01:03 UTC
The libffi build with this change has been stable for some time, and we've been through the mass rebuild, so I think everything is done here. Marking as ON_QA (indicating 100% complete).

Comment 2 Aoife Moloney 2023-11-14 18:57:27 UTC
F39 was released on November 7th, so I am closing this tracker. If this Change was not completed, please notify me ASAP.


Note You need to log in before you can comment on or make changes to this bug.