Bug 882188 - samba4-libs: yyin symbol collision
Summary: samba4-libs: yyin symbol collision
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: samba4
Version: 6.3
Hardware: Unspecified
OS: Unspecified
medium
unspecified
Target Milestone: rc
: ---
Assignee: Andreas Schneider
QA Contact: Namita Soman
URL:
Whiteboard:
Depends On:
Blocks: 882173
TreeView+ depends on / blocked
 
Reported: 2012-11-30 11:04 UTC by Florian Weimer
Modified: 2013-02-21 08:46 UTC (History)
1 user (show)

Fixed In Version: samba4-4.0.0-24.el6.rc1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-02-21 08:46:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2013:0506 0 normal SHIPPED_LIVE Moderate: samba4 security, bug fix and enhancement update 2013-02-20 21:30:25 UTC

Description Florian Weimer 2012-11-30 11:04:37 UTC
Two DSOs define "yyin" and other flex-related symbols:

 /usr/lib64/libdcerpc_samr.so.0.0.1     | samba4-libs-4.0.0-23.alpha11.el6.x86_64
 /usr/lib64/libdcerpc.so.0.0.1          | samba4-libs-4.0.0-23.alpha11.el6.x86_64

This can lead to symbol collisions and hard-to-track-down bugs.  These symbols should be mangled or hidden.

This might already have been fixed upstream because I don't see it in F18 anymore.

Comment 2 Andreas Schneider 2012-11-30 12:10:27 UTC
yyin and yyout are defined in the in-source heimdal kerberos. In RHEL 6.4 we build with MIT Kerberos. So there are no such symbols.

Comment 3 Andreas Schneider 2012-11-30 12:17:14 UTC
Also all heimdal 'in-source' libraries have version scripts to export only public symbols. This is fixed with the rebase!

Comment 5 Namita Soman 2013-01-29 02:47:56 UTC
please provide steps to verify

Comment 6 Florian Weimer 2013-01-29 09:17:48 UTC
(In reply to comment #5)
> please provide steps to verify

You can check the DSOs with:

$ readelf -s libdcerpc.so.0.0.1 | grep yy

If this command shows no output, the symbols are indeed gone.

Comment 7 Namita Soman 2013-01-29 11:21:19 UTC
Thanks for the steps!

Verified using them:
readelf -s /usr/lib64/libdcerpc.so.0.0.1 | grep yy
<Nothing listed>

Comment 8 errata-xmlrpc 2013-02-21 08:46:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0506.html


Note You need to log in before you can comment on or make changes to this bug.