Bug 352640 – app-arch/upx-bin-3.07: exec of /opt/bin/upx fails with PaX (MPROTECT) enabled kernels like hardened-sources

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Lubomir Krajcovic 2011-01-24 22:55:09 UTC]

upx-bin emerges fine, but forgets to disable MPROTECT on /opt/bin/upx upon installing, thus preventing upx from being functional on PaX enabled machines.

Consequentialy other ebuils (like media-video/tsmuxer-1.10.6-r1) fail to emerge, because they require working upx binary.

Reproducible: Always

Steps to Reproduce:
1. use hardened-sources with enabled PaX and MPROTECT
2. emerge upx-bin
3. execute (in terminal): /opt/bin/upx

Actual Results:  
upx fails with following error message:
PROT_EXEC|PROT_WRITE failed.


Expected Results:  
display of upx help page.

[Comment 1 Lubomir Krajcovic 2011-01-24 22:58:31 UTC]

Created attachment 260618 [details, diff]
ebuild patch implementing PaX marking of /opt/bin/upx

[Comment 2 Francisco Blas Izquierdo Riera (RETIRED) 2011-02-11 16:35:13 UTC]

CCing maintainer (as I still can't assign to him)

@Reporter, you may want to use upx-ucl in the mean time ;)

[Comment 3 Anthony Basile 2011-08-11 23:43:29 UTC]

@matsuu, this is a completely safe patch.  Can you commit it and close this bug?

[Comment 4 Anthony Basile 2011-10-09 20:57:04 UTC]

Ping @matsuu

[Comment 5 MATSUU Takuto (RETIRED) 2011-10-10 15:29:28 UTC]

sorry for delay.
3.07-r1 in cvs.