Never run ldd on unknown executables

Re:Never run ldd on unknown executables by GuB-42 on Sunday July 23, 2023 @08:19PM (#36841475)

Because you may want ldd to work when the program is using a different loader. Not all nonstandard loaders are malicious.

If you want to avoid this risk, use something else, like readelf or lddtree.

[ Parent | on HN ]

Re:Never run ldd on unknown executables by eek2121 on Sunday July 23, 2023 @08:38PM (#36841603)

This attitude is why this issue exists in the first place.

[ Parent | on HN ]

Re:Never run ldd on unknown executables by planede on Monday July 24, 2023 @05:12AM (#36844944)

ldd's implementation relies on the assumption that the loader respects the LD_TRACE_LOADED_OBJECTS environment variable. Do all non-malicious loaders need to respect this environment variable and implement GNU ld.so's behavior?

[ Parent | on HN ]