27 Commits (42bb1ea363286b088257cabccb686ef1887c1d3b)

Author	SHA1	Message	Date
fanquake	1ef2138c0d	lint: run mypy over contrib/devtools	4 years ago
Luke Dashjr	a0a771843f	contrib: Changes to checks for PowerPC64 ... Changes from #14066.	4 years ago
Wladimir J. van der Laan	634f6ec4eb	contrib: Parse ELF directly for symbol and security checks ... Instead of the ever-messier text parsing of the output of the readelf tool (which is clearly meant for human consumption not to be machine parseable), parse the ELF binaries directly. Add a small dependency-less ELF parser specific to the checks. This is slightly more secure, too, because it removes potential ambiguity due to misparsing and changes in the output format of `elfread`. It also allows for stricter and more specific ELF format checks in the future. This removes the build-time dependency for `readelf`. It passes the test-security-check for me locally, though I haven't checked on all platforms.	4 years ago
fanquake	1a0993ae35	scripts: add PE dylib checking to symbol-check.py	5 years ago
fanquake	c491368d8c	scripts: add MACHO dylib checking to symbol-check.py	5 years ago
Wladimir J. van der Laan	f6e42256fe	build: Allow export of environ symbols ... This export was introduced in #17270 which added ``` //! Necessary on some platforms extern char** environ; ```	5 years ago
Wladimir J. van der Laan	16a7be1663	build: Bump minimum versions in symbol checker ... Debian 8 (Jessie) has: - g++ version 4.9.2 - libc version 2.19 Ubuntu 16.04.4 (Xenial) has: - g++ version 5.3.1 - libc version 2.23.0 CentOS 7 has: - g++ version 4.8.5 - libc version 2.17 Taking the minimum of these as our target. According to the GNU ABI document this corresponds to: - GCC 4.8.5: GCC_4.8.0 - (glibc) GLIBC_2_17 Co-Authored-By: fanquake <fanquake@gmail.com>	5 years ago
Wladimir J. van der Laan	b77d5ad59f	build: Disallow dynamic linking against c++ library ... Ever since statically linking Qt, we've been linking the C++ library statically too (-static-libstdc++). Take this into account in the symbol checker.	5 years ago
fanquake	ec89d2882a	build: remove libanl.so.1 from ALLOWED_LIBRARIES	5 years ago
Ben Woosley	b21680baf5	test/contrib: Fix invalid escapes in regex strings ... Flagged by flake8 v3.6.0, as W605, plus a few others identified incidentally, e.g. 59ffecf66cf4d08c4b431e457b083878d66a3fd6. Note that r"\n" matches to "\n" under re.match/search.	5 years ago
Carl Dong	65f8da08df	symbol-check: Disallow libX11-*.so.* shared libraries ... They should no longer be needed as we build QT without libX11/XLib libraries now.	5 years ago
MarcoFalke	fab5a1e0f4	build: Require python 3.5	6 years ago
Chun Kuan Lee	c516c3a770	[contrib] Support ARM and RISC-V symbol check	6 years ago
Chun Kuan Lee	253f592909	Add stdin, stdout, stderr to ignored export list	7 years ago
John Newbery	f50975b136	[contrib] fixup symbol-check.py Python3 support	7 years ago
John Newbery	bc6fdf2d15	Change all python files to use Python3	7 years ago
practicalswift	25cd520fc4	Use sys.exit(...) instead of exit(...): exit(...) should not be used in programs	7 years ago
Matthew King	7b01ce254c	Favour python over python2 as per PR #7723	8 years ago
Matthew King	873e81f89b	Use portable #! in python scripts (/usr/bin/env)	8 years ago
Wladimir J. van der Laan	18f05c765c	build: python 3 compatibility ... Ubuntu 16.04 "xenial xerus" does not come with Python 2.x by default. It is possible to install a python-2.7 package, but this has its own problem: no `python` or `python2` symlink (see #7717). This fixes the following scripts to work with python 3: - `make check` (bctest,py, bitcoin-util-test.py) - `make translate` (extract_strings_qt.py) - `make symbols-check` (symbol-check.py) - `make security-check` (security-check.py) Explicitly call the python commands using $(PYTHON) instead of relying on the interpreter line at the top of the scripts.	9 years ago
Cory Fields	475813ba5b	release: add _IO_stdin_used to ignored exports ... For details see: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634261#109	9 years ago
Wladimir J. van der Laan	9f251b7a9d	devtools: add libraries for bitcoin-qt to symbol check ... Forgot to add these. Also add a short description for each required library.	9 years ago
Wladimir J. van der Laan	579b863cd7	devtools: Add security-check.py ... Perform the following ELF security checks: - PIE: Check for position independent executable (PIE), allowing for address space randomization - NX: Check that no sections are writable and executable (including the stack) - RELRO: Check for read-only relocations, binding at startup - Canary: Check for use of stack canary Also add a check to symbol-check.py that checks that only the subset of allowed libraries is imported (to avoid incompatibilities).	9 years ago
Michael Ford	78253fcbad	Remove references to X11 licence	10 years ago
Wladimir J. van der Laan	27116e87cc	devtools: Exclude default exports from symbol-checker script ... See discussion in #4663.	10 years ago
Wladimir J. van der Laan	202c95c216	devtools: have symbol check script check for exported symbols ... After last commit, our executables should export no symbols anymore. To make sure that this stays the case, verify this in the symbol checker script.	11 years ago
Wladimir J. van der Laan	74fc254c2b	devtools: add script to check symbols from Linux gitian executables ... Add a script to check that the (Linux) executables produced by gitian only contain allowed gcc, glibc and libstdc++ version symbols. This makes sure they are still compatible with the minimum supported Linux distribution versions.	11 years ago