Re: Detecting fake library versions

2010-06-17 Thread Warren Block
On Thu, 17 Jun 2010, Matthew Seaman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 16:04:20, Warren Block wrote: This is not generally true for shlibs installed from ports, mostly due to the prevalence of linuxisms like ABI version numbers that aren't simple integers. Even

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 16:04:20, Warren Block wrote: >> This is not generally true for shlibs installed from ports, mostly due >> to the prevalence of linuxisms like ABI version numbers that aren't >> simple integers. Even so, applying a little intelligent scr

Re: Detecting fake library versions

2010-06-17 Thread Warren Block
On Thu, 17 Jun 2010, Matthew Seaman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 01:59:04, Warren Block wrote: On Wed, 16 Jun 2010, Warren Block wrote: "ln -s libintl.so.9 libintl.so.8" has been misused a lot lately. Are there any programs that will detect these links

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 09:16:33, Jonathan McKeown wrote: > On Thursday 17 June 2010 09:39:37 Matthew Seaman wrote: >> >> "But what about hard links?" I hear you ask. Simple: >> >> find /usr/lib /lib -name '*.so.*' -links +2 > > +1 surely? + modifier in find

Re: Detecting fake library versions

2010-06-17 Thread Jonathan McKeown
On Thursday 17 June 2010 09:39:37 Matthew Seaman wrote: > > "But what about hard links?" I hear you ask. Simple: > > find /usr/lib /lib -name '*.so.*' -links +2 +1 surely? + modifier in find(1) means ``more than'', not ``at least''. Jonathan ___ free

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 08:34:52, Matthew Seaman wrote: > On 17/06/2010 01:59:04, Warren Block wrote: >> On Wed, 16 Jun 2010, Warren Block wrote: > >>> "ln -s libintl.so.9 libintl.so.8" has been misused a lot lately. >>> >>> Are there any programs that will det

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 01:59:04, Warren Block wrote: > On Wed, 16 Jun 2010, Warren Block wrote: > >> "ln -s libintl.so.9 libintl.so.8" has been misused a lot lately. >> >> Are there any programs that will detect these links and remind the >> user that they hav

Re: Detecting fake library versions

2010-06-16 Thread Warren Block
On Wed, 16 Jun 2010, Warren Block wrote: "ln -s libintl.so.9 libintl.so.8" has been misused a lot lately. Are there any programs that will detect these links and remind the user that they have a new library masquerading as an old one? A quick hack in Ruby to address this: http://www.wonkity

Detecting fake library versions

2010-06-16 Thread Warren Block
"ln -s libintl.so.9 libintl.so.8" has been misused a lot lately. Are there any programs that will detect these links and remind the user that they have a new library masquerading as an old one? -Warren Block * Rapid City, South Dakota USA ___ freebsd