Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 234498 - dev-lang/python-2.6.2-r1: test_ctypes killed by PAX
Summary: dev-lang/python-2.6.2-r1: test_ctypes killed by PAX
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Python Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-08-11 19:35 UTC by Olivier Huber
Modified: 2009-07-31 14:03 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
patch for python's ebuild (python.patch,793 bytes, patch)
2008-08-11 20:13 UTC, Olivier Huber
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Olivier Huber 2008-08-11 19:35:48 UTC
test_ctypes
        find_library('c') ->  libc.so.6
        find_library('m') ->  libm.so.6
make: *** [test] Killed

cat /var/log/pax.log :

Jul 22 12:21:10 dedie PAX: execution attempt in: <anonymous mapping>, 33bec4889000-33bec488b000 33bec4889000
Jul 22 12:21:10 dedie PAX: terminating task: /var/tmp/portage/dev-lang/python-2.5.2-r5/work/Python-2.5.2/python(python):19516, uid/euid: 0/0, PC: 000033bec4889fc0, SP: 000072b15a498998
Jul 22 12:21:10 dedie PAX: bytes at PC: 49 bb 1e 66 5a cd be 33 00 00 49 ba c0 9f 88 c4 be 33 00 00
Jul 22 12:21:10 dedie PAX: bytes at SP-8: 0000000000000000 000033becd5a6538 000000000000080a 000072b15a498ad0 000072b15a498a80 000033becd5a608c 0000000000000000 000033becd5a5cb9 000072b15a498a30 000072b15a498a2c 000072b15a498a28
Jul 22 12:21:36 dedie PAX: execution attempt in: <anonymous mapping>, 2be8c24cb000-2be8c24cc000 2be8c24cb000
Jul 22 12:21:36 dedie PAX: terminating task: /var/tmp/portage/dev-lang/python-2.5.2-r5/work/Python-2.5.2/python(python):19608, uid/euid: 0/0, PC: 00002be8c24cbfc0, SP: 000079e7f44c6a38
Jul 22 12:21:36 dedie PAX: bytes at PC: 49 bb 1e c6 0b c2 e8 2b 00 00 49 ba c0 bf 4c c2 e8 2b 00 00
Jul 22 12:21:36 dedie PAX: bytes at SP-8: 0000000000000000 00002be8c20bc538 000000000000080a 000079e7f44c6b70 000079e7f44c6b20 00002be8c20bc08c 0000000000000000 00002be8c20bbcb9 000079e7f44c6ad0 000079e7f44c6acc 000079e7f44c6ac8

I'll post a patch to disable this test if Pax is enable.

emerge --info :

Portage 2.2_rc7 (hardened/linux/amd64/2008.0, gcc-3.4.6, glibc-2.6.1-r0, 2.6.24-hardened-r3 x86_64)
=================================================================
System uname: Linux-2.6.24-hardened-r3-x86_64-Intel-R-_Celeron-R-_CPU_220_@_1.20GHz-with-glibc2.3.2
Timestamp of tree: Mon, 11 Aug 2008 03:45:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p33
dev-lang/python:     2.4.4-r6
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.2.5
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r2
sys-devel/automake:  1.10.1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -fforce-addr"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active//etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -pipe -fforce-addr"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks parallel-fetch preserve-libs sandbox sfperms strict test unmerge-orphans userfetch"
GENTOO_MIRRORS="http://mirror.ovh.net/gentoo-distfiles ftp://mirror.ovh.net/gentoo-distfiles"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--hash-style=gnu -Wl,--as-needed"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/overlays/local"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="acl amd64 apache2 bash-completion berkdb bzip2 caps cli cracklib crypt cups dovecot-sasl dri gdbm geoip hardened iconv idn ipv6 isdnlog justify ldap mbox midi mmx mudflap multilib mysql ncurses nls nptl nptlonly openmp pam pcre perl pic pppd python readline reflection ruby session spl sqlite sqlite3 sse sse2 ssl suhosin sysfs tcpd unicode urandom vhosts vim-syntax xml xorg xtended zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asymcopy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap includeinfo log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Olivier Huber 2008-08-11 20:13:59 UTC
Created attachment 162703 [details, diff]
patch for python's ebuild
Comment 2 Joshua Pettett 2008-08-29 04:06:06 UTC
I have the same problem and confirm that the patch works, at least for the purpose of allowing the emerge to complete.  But of more concern to me is: how many scripts running on production servers use the same functionality that causes this test to fail?  What will be the impact on stability on systems that disallow relocations and the impact on security on systems that allow relocations?
Comment 3 Dennis Lichtenthäler 2009-04-20 07:34:23 UTC
The same bug is still present on Python 2.5.4-r2. The patch in comment 1 still applies cleanly and correctly skips the affected patch. 
Comment 4 Dennis Lichtenthäler 2009-07-31 08:03:16 UTC
This bug still occurs with 2.6.2-r1... Any chance of getting the fix in the tree?
Comment 5 Arfrever Frehtes Taifersar Arahesis (RETIRED) gentoo-dev 2009-07-31 14:03:37 UTC
Fixed.