Remove exploitable LD_BIND_NOW hack (CVE-2009-1894).
authorDiego Elio 'Flameeyes' Pettenò <flameeyes@gmail.com>
Tue, 7 Jul 2009 18:51:53 +0000 (20:51 +0200)
committerDiego Elio 'Flameeyes' Pettenò <flameeyes@gmail.com>
Thu, 16 Jul 2009 13:57:41 +0000 (15:57 +0200)
commit84200b423ebfa7e2dad9b1b65f64eac7bf3d2114
treea469037503d8dfc78813ba19d3b94f700bb641b1
parentff252cb48d9bd827d262eb2633fecaff47c6fe5c
Remove exploitable LD_BIND_NOW hack (CVE-2009-1894).

Instead of trying to re-execute pulseaudio itself with LD_BIND_NOW set,
just find the correct flag for the linker to request immediate bindings
(all ELF files support that option), and use that when linking the daemon.

Reduce the amount of compiled and executed code as well.
configure.ac
src/Makefile.am
src/daemon/main.c