Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 892724 - dev-util/pwntools-4.10.0_beta0-r1 collides with app-admin/checksec (checksec) and sys-apps/moreutils (errno)
Summary: dev-util/pwntools-4.10.0_beta0-r1 collides with app-admin/checksec (checksec)...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: mario.haustein
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2023-01-31 13:00 UTC by Sam James
Modified: 2023-02-01 07:38 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-01-31 13:00:13 UTC
>>>> Extracting dev-util/pwntools-4.10.0_beta0-r1
 * checking 25341 files for package collisions
 * This package will overwrite one or more files that may belong to other
 * packages (see list below). You can use a command such as `portageq
 * owners / <filename>` to identify the installed package that owns a
 * file. If portageq reports that only one package owns a file then do
 * NOT file a bug report. A bug report is only useful if it identifies at
 * least two or more packages that are known to install the same file(s).
 * If a collision occurs and you can not explain where the file came from
 * then you should simply ignore the collision since there is not enough
 * information to determine if a real problem exists. Please do NOT file
 * a bug report at https://bugs.gentoo.org/ unless you report exactly
 * which two packages install the same file(s). See
 * https://wiki.gentoo.org/wiki/Knowledge_Base:Blockers for tips on how
 * to solve the problem. And once again, please do NOT file a bug report
 * unless you have completely understood the above message.
 *
 * Detected file collision(s):
 *
 *      /usr/bin/errno
 *      /usr/bin/checksec
 *
 * Searching all installed packages for file collisions...
 *
 * Press Ctrl-C to Stop
 *
 * app-admin/checksec-2.6.0:0::gentoo
 *      /usr/bin/checksec
 *
 * sys-apps/moreutils-0.67:0::gentoo
 *      /usr/bin/errno
 *
 * Package 'dev-util/pwntools-4.10.0_beta0-r1' NOT merged due to file
 * collisions. If necessary, refer to your elog messages for the whole
 * content of the above message.

----


Portage 3.0.44 (python 3.11.1-final-0, default/linux/amd64/17.1/hardened, gcc-13, glibc-2.36-r7, 6.1.8-gentoo-dist-hardened x86_64)
=================================================================
System uname: Linux-6.1.8-gentoo-dist-hardened-x86_64-AMD_Ryzen_9_3950X_16-Core_Processor-with-glibc2.36
KiB Mem:    65758020 total,  20499760 free
KiB Swap:    8290300 total,   3890940 free
Timestamp of repository gentoo: Tue, 31 Jan 2023 12:32:00 +0000
Head commit of repository gentoo: bfb1b7819d24e2679b34fa8fe1c8a34f8601610b

Timestamp of repository emacs: Mon, 30 Jan 2023 17:48:16 +0000
Head commit of repository emacs: 225ac79e9d8f56f7524de5c71befcb1fc81d7be3

Timestamp of repository kde: Mon, 30 Jan 2023 21:16:56 +0000
Head commit of repository kde: 926de13117b8029a88865436a5d49ff00c61913b

Timestamp of repository qt: Mon, 30 Jan 2023 17:48:23 +0000
Head commit of repository qt: 7cbfa41ff456b56ca55650696b3e9a7c14f92037

Timestamp of repository sam_c: Mon, 30 Jan 2023 17:48:45 +0000
Head commit of repository sam_c: 72ff75c217156204498792aaba2371bc0e5fb834

Timestamp of repository steam-overlay: Mon, 30 Jan 2023 17:48:24 +0000
Head commit of repository steam-overlay: cb2e509008f4686631582637696f9f98d10588d6

sh dash 0.5.12
ld GNU ld (Gentoo 2.40 p1) 2.40
ccache version 4.7.4 [disabled]
app-misc/pax-utils:        1.3.7::gentoo
app-shells/bash:           5.2_p15-r1::gentoo
dev-java/java-config:      2.3.1::gentoo
dev-lang/perl:             5.36.0-r2::gentoo
dev-lang/python:           3.9.16-r1::gentoo, 3.10.9-r1::gentoo, 3.11.1-r1::gentoo, 3.12.0_alpha4-r1::gentoo
dev-lang/rust:             1.67.0::gentoo
dev-util/ccache:           4.7.4::gentoo
dev-util/cmake:            3.25.2::gentoo
dev-util/meson:            1.0.0::gentoo
sys-apps/baselayout:       2.13-r1::gentoo
sys-apps/sandbox:          2.30-r1::gentoo
sys-apps/systemd:          252.5::gentoo
sys-devel/autoconf:        2.13-r7::gentoo, 2.71-r5::gentoo
sys-devel/automake:        1.16.5::gentoo
sys-devel/binutils:        2.40::gentoo
sys-devel/binutils-config: 5.5::gentoo
sys-devel/clang:           15.0.7-r1::gentoo, 16.0.0_pre20230127::gentoo
sys-devel/gcc:             10.4.1_p20230126::gentoo, 11.3.1_p20230127::gentoo, 12.2.1_p20230128::gentoo, 13.0.1_pre20230129-r1::gentoo
sys-devel/gcc-config:      2.10::gentoo
sys-devel/libtool:         2.4.7-r1::gentoo
sys-devel/lld:             15.0.7::gentoo, 16.0.0_pre20230127::gentoo
sys-devel/llvm:            14.0.6-r2::gentoo, 15.0.7::gentoo, 16.0.0_pre20230127::gentoo
sys-devel/make:            4.4.0.90::gentoo
sys-kernel/linux-headers:  6.1::gentoo (virtual/os-headers)
sys-libs/glibc:            2.36-r7::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/gentoo.git
    priority: -1000
    eclass-overrides: sam_c
    volatile: True
    sync-git-verify-commit-signature: yes
    sync-git-clone-extra-opts: -b stable -c gc.reflogExpire=0 -c gc.reflogExpireUnreachable=0 -c gc.rerereresolved=0 -c gc.rerereunresolved=0 -c gc.pruneExpire=now

crossdev
    location: /var/db/repos/crossdev
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

emacs
    location: /var/db/repos/emacs
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/emacs.git
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

kde
    location: /var/db/repos/kde
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/kde.git
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

local
    location: /var/db/repos/local
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

qt
    location: /var/db/repos/qt
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/qt.git
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

sam_c
    location: /var/db/repos/sam_c
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/sam_c.git
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

steam-overlay
    location: /var/db/repos/steam-overlay
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/steam-overlay.git
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

test
    location: /var/db/repos/test
    masters: gentoo
    eclass-overrides: sam_c
    volatile: True

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.2/ext-active/ /etc/php/cgi-php8.2/ext-active/ /etc/php/cli-php8.2/ext-active/ /etc/php/fpm-php8.2/ext-active/ /etc/php/phpdbg-php8.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type"
DISTDIR="/var/cache/distfiles"
EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --complete-graph --deep --dynamic-deps=n --changed-deps=n --usepkg-exclude sys-fs/zfs --usepkg-exclude sys-fs/zfs-kmod --usepkg=y --implicit-system-deps=n --jobs=4 --load-average 32"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg cgroup clean-logs config-protect-if-modified distlocks fixlafiles ipc-sandbox mount-sandbox multilib-strict network-sandbox news parallel-fetch parallel-install pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe -march=native -fdiagnostics-color=always -frecord-gcc-switches -Wreturn-type"
GENTOO_MIRRORS="http://www.mirrorservice.org/sites/distfiles.gentoo.org/ http://mirrors.soeasyto.com/distfiles.gentoo.org/"
LANG="en_GB.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--defsym=__gentoo_check_ldflags__=0 -Wl,-z,pack-relative-relocs"
LEX="reflex"
LINGUAS="en en_GB"
MAKEOPTS="-j32 -l32"
PKGDIR="/var/cache/binpkgs"
PORTAGE_BUNZIP2_COMMAND="lbunzip2"
PORTAGE_COMPRESS="xz"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
RUSTFLAGS="-C target-cpu=native"
SHELL="/bin/bash"
USE="PIC X a52 aac acl acpi activities aes alsa amd64 avx avx2 bash-completion bluetooth branding bzip2 cairo caps cdda cdr cet clang cli crypt dbus declarative dist-kernel dri dts dvd dvdr emacs encode exif f16c filecaps firewalld flac fma3 fortran freetype gdbm gif gmp gpm graphite gtk gui hardened harfbuzz hunspell iconv icu ipv6 jit jpeg kde kdesu kwallet lcms libglvnd libnotify libtirpc lto mad mmx mmxext mng mp3 mp4 mpeg multilib ncurses nftables nls nptl ogg opengl openmp pam pango pclmul pcre pdf pgo pie pipewire plasma png policykit popcnt ppds pulseaudio qml qt5 rdrand readline screencast sdl seccomp semantic-desktop sha sound spell sse sse2 sse3 sse4_1 sse4_2 sse4a ssl ssp ssse3 startup-notification svg system-av1 system-binutils system-boost system-bootstrap system-cairo system-clang system-digest system-ffmpeg system-harfbuzz system-heimdal system-icu system-jpeg system-leveldb system-libevent system-libs system-libvpx system-libyaml system-llvm system-lz4 system-mitkrb5 system-sqlite system-ssl system-tbb system-uulib system-webp system-zlib systemd test-rust tiff truetype udev udisks unicode upower usb verify-sig vorbis vulkan wayland widgets x264 xattr xcb xft xml xtpax xv xvid zfs zlib zsh-completion" ABI_X86="32 64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en en-GB" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LLVM_TARGETS="X86 AArch64 AMDGPU ARM AVR BPF Hexagon Lanai MSP430 Mips NVPTX PowerPC RISCV Sparc SystemZ WebAssembly XCore" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-4 php8-0" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_11" PYTHON_TARGETS="python3_10 pypy3 python3_11 python3_8 python3_9" QEMU_USER_TARGETS="aarch64 aarch64_be alpha armeb hppa m68k ppc ppc64 ppc64le sparc sparc64" RUBY_TARGETS="ruby31" USERLAND="GNU" VIDEO_CARDS="amdgpu radeonsi radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account"
YACC="byacc"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, SIZE, STRINGS, STRIP, YFLAGS
Comment 1 Sebastian Pipping gentoo-dev 2023-01-31 17:04:08 UTC
I had a look and found that:

  - pwntools' version of errno and checksec serve the identical purpose
    but offer a reduced set of features
    
  - pwntools' upstream is aware of the other checksec, but they expect it's
    named "checksec.sh" according to the help output of their own checksec.py.

  - pwntools' checksec.py has a python 2 shebang line?!

  - pwntools makes their own version available as "pwn (checksec|errno) [..]"
    as well, see main.py.

I believe our options are:

  a) Make pwntools just not install /usr/bin/errno and /usr/bin/checksec
     unconditionally

  b) Like (a) but add moreutils and checksec as dependencies

  c) Add use flags "system-errno" and "system-checksec" to control
     installation of these files

  d) Like (c) but also add moreutils and checksec as dependencies
     depending on use flags

  e) other ideas here :)
Comment 2 Sebastian Pipping gentoo-dev 2023-01-31 17:05:08 UTC
PS:

Here's what errno of moreutils does:

  $ errno --search I/O
  EREMOTEIO 121 Remote I/O error

  $ errno --list
  EPERM 1 Operation not permitted
  ENOENT 2 No such file or directory
  [..]

  $ errno 2
  ENOENT 2 No such file or directory

  $ errno ENOENT
  ENOENT 2 No such file or directory
  
Here's what errno.py of pwntools does:
  
  $ python3 errno.py 2
  #define ENOENT 2
  No such file or directory
 
  $ python3 errno.py ENOENT
  #define ENOENT 2
  No such file or directory

Here's what checksec.py of pwntools does:

  $ python3 checksec.py /bin/bash
  [*] '/bin/bash'
      Arch:     amd64-64-little
      RELRO:    Partial RELRO
      Stack:    Canary found
      NX:       NX enabled
      PIE:      PIE enabled
      FORTIFY:  Enabled

I'll save you the wide output of "checksec --file=/bin/bash".
Comment 3 mario.haustein 2023-01-31 17:21:43 UTC
(In reply to Sebastian Pipping from comment #1)

>   e) other ideas here :)

It seems there are other links in /usr/bin which are likely to collide:

```
$ q list pwntools
...
/usr/bin/common
/usr/bin/elfdiff
/usr/bin/constgrep
/usr/bin/version
/usr/bin/checksec
/usr/bin/disasm
/usr/bin/template
/usr/bin/main
/usr/bin/debug
/usr/bin/disablenx
/usr/bin/hex
/usr/bin/phd
/usr/bin/errno
/usr/bin/asm
/usr/bin/libcdb
/usr/bin/shellcraft
/usr/bin/pwnstrip
/usr/bin/scramble
/usr/bin/elfpatch
/usr/bin/cyclic
/usr/bin/unhex
/usr/bin/pwn
/usr/bin/update
```

Another option would be just to install /usr/bin/pwn and to access all commands through this handler.
Comment 4 Sebastian Pipping gentoo-dev 2023-01-31 18:04:09 UTC
(In reply to mario.haustein from comment #3)
> /usr/bin/common
> [..]
> /usr/bin/version
> [..]
> /usr/bin/template
> [..]
> /usr/bin/main
> /usr/bin/debug
> [..]
> /usr/bin/update

Wow!

Maybe the idea was to own /usr/bin? :)


> Another option would be just to install /usr/bin/pwn and to access all
> commands through this handler.

Sounds good to me.
Comment 5 Larry the Git Cow gentoo-dev 2023-02-01 07:27:08 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2c49cc00ae62e5161c8ad4b0e105d6d0456a4752

commit 2c49cc00ae62e5161c8ad4b0e105d6d0456a4752
Author:     Mario Haustein <mario.haustein@hrz.tu-chemnitz.de>
AuthorDate: 2023-01-31 21:39:10 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-01 07:25:43 +0000

    dev-util/pwntools: don't mess up /usr/bin with file collision
    
    Closes: https://bugs.gentoo.org/892724
    Signed-off-by: Mario Haustein <mario.haustein@hrz.tu-chemnitz.de>
    Closes: https://github.com/gentoo/gentoo/pull/29364
    Signed-off-by: Sam James <sam@gentoo.org>

 dev-util/pwntools/Manifest                                        | 4 ++--
 ...ols-4.10.0_beta0-r1.ebuild => pwntools-4.10.0_beta0-r2.ebuild} | 8 +++++++-
 .../{pwntools-4.9.0-r1.ebuild => pwntools-4.9.0-r2.ebuild}        | 8 +++++++-
 dev-util/pwntools/pwntools-9999.ebuild                            | 8 +++++++-
 4 files changed, 23 insertions(+), 5 deletions(-)
Comment 6 Larry the Git Cow gentoo-dev 2023-02-01 07:38:11 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e36c733c6b8677b6192b99879f6b1e46154e3838

commit e36c733c6b8677b6192b99879f6b1e46154e3838
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-01 07:37:34 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-01 07:38:01 +0000

    app-admin/checksec: add blocker on older pwntools
    
    Bug: https://bugs.gentoo.org/892724
    Signed-off-by: Sam James <sam@gentoo.org>

 .../checksec/{checksec-2.4.0.ebuild => checksec-2.4.0-r1.ebuild}      | 4 +++-
 .../checksec/{checksec-2.5.0.ebuild => checksec-2.5.0-r1.ebuild}      | 4 +++-
 .../checksec/{checksec-2.6.0.ebuild => checksec-2.6.0-r1.ebuild}      | 4 +++-
 3 files changed, 9 insertions(+), 3 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9e1088b5763b485e9f1baefc74e2b16cb13b9b06

commit 9e1088b5763b485e9f1baefc74e2b16cb13b9b06
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-01 07:36:25 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-01 07:37:59 +0000

    sys-apps/moreutils: add blocker on older pwntools
    
    Bug: https://bugs.gentoo.org/892724
    Signed-off-by: Sam James <sam@gentoo.org>

 .../{moreutils-0.67.ebuild => moreutils-0.67-r1.ebuild}   | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)