diff options
| author | Nick Clifton <nickc@redhat.com> | 2014-10-31 10:10:37 +0000 |
|---|---|---|
| committer | Nick Clifton <nickc@redhat.com> | 2014-10-31 10:10:37 +0000 |
| commit | 7fac9594c41ab180979bdf5927ff7f7e1d13a9e9 (patch) | |
| tree | abd05bafbd9947321990c3999d94fb72ad2b40dd /binutils/configure | |
| parent | 02be9a71009c94840f2367aa5554cbe5b71f56d1 (diff) | |
| download | gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.zip gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.tar.gz gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.tar.bz2 | |
In response to a public outcry the strings program now defaults to using the
--all option which displays text from anywhere in the input file(s). The
default used to be --data, which only displays text from loadable data sections,
but this requires the use of the BFD library. Since the BFD library almost
certainly still contains buffer overrun and/or memory corruption bugs, and
since the strings program is often used to examine malicious code, it was
decided that the --data option option represents a possible security risk.
* strings.c: Add new command line option --data to only scan the
initialized, loadable data secions of binaries. Choose the
default behaviour of --all or --data based upon a configure
option.
* doc/binutils.texi (strings): Update documentation. Include
description of why the --data option might be unsafe.
* configure.ac: Add new option --disable-default-strings-all which
restores the old behaviour of strings using --data by default. If
the option is not used make strings use --all by default.
* NEWS: Mention the new behaviour of strings.
* configure: Regenerate.
* config.in: Regenerate.
Diffstat (limited to 'binutils/configure')
| -rwxr-xr-x | binutils/configure | 26 |
1 files changed, 24 insertions, 2 deletions
diff --git a/binutils/configure b/binutils/configure index 5126076..70387ea 100755 --- a/binutils/configure +++ b/binutils/configure @@ -772,6 +772,7 @@ enable_plugins enable_largefile enable_targets enable_deterministic_archives +enable_default_strings_all enable_werror enable_build_warnings enable_nls @@ -1423,6 +1424,8 @@ Optional Features: --enable-targets alternative target configurations --enable-deterministic-archives ar and ranlib default to -D behavior + --disable-default-strings-all + strings defaults to --data behavior --enable-werror treat compile warnings as errors --enable-build-warnings enable build-time compiler warnings --disable-nls do not use Native Language Support @@ -10984,7 +10987,7 @@ else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF -#line 10987 "configure" +#line 10990 "configure" #include "confdefs.h" #if HAVE_DLFCN_H @@ -11090,7 +11093,7 @@ else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF -#line 11093 "configure" +#line 11096 "configure" #include "confdefs.h" #if HAVE_DLFCN_H @@ -11681,6 +11684,25 @@ cat >>confdefs.h <<_ACEOF _ACEOF +# Check whether --enable-default-strings-all was given. +if test "${enable_default_strings_all+set}" = set; then : + enableval=$enable_default_strings_all; +if test "${enableval}" = no; then + default_strings_all=0 +else + default_strings_all=1 +fi +else + default_strings_all=1 +fi + + + +cat >>confdefs.h <<_ACEOF +#define DEFAULT_STRINGS_ALL $default_strings_all +_ACEOF + + # Set the 'development' global. . $srcdir/../bfd/development.sh |