SILC libraries leaking private symbols

Jérémy Bobbio lunar at debian.org
Sun Mar 9 12:11:54 CET 2008


Hi!

While improve the Debian package of silc-toolkit (currently using
1.1.6), I have noticed that libsilc was exporting symbols that should
probably be private (224 of them, if my shell-fu is correct [1]).

For the record, most of these symbols are coming from the various
imported sources implementing crypto algorithms.

As libsilc (and other libraries from the SILC projet) uses a well
defined namespace, it would probably make sense to use libtool's
"-export-symbols-regex" option.

I have done a quick test by adding to LIBTOOL_SILC_VERSION:
  -export-symbols-regex '^silc_' 

This indeed fixed the issue.

[1] $ objdump -T /usr/lib/libsilc-1.1.so.2.1.0 | grep -v ^00000000 |
          grep ^[0-9] | grep -v ' silc_' | grep -v ' _' | wc -l

Cheers,
-- 
Jérémy Bobbio                        .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.silcnet.org/pipermail/silc-devel/attachments/20080309/66df3996/attachment.bin


More information about the silc-devel mailing list