3 ms·
A good time for a reminder that you shouldn't `ldd` untrusted executables. It basically works by executing them with some special flags that the linker picks up
by kevincox 3y ago
A good time for a reminder that you shouldn't `ldd` untrusted executables. It basically works by executing them with some special flags that the linker picks up which causes it to print the report. If the binary is nefarious it can hijack this and run whatever it wants.
https://sourceware.org/git/?p=glibc.git;a=blob;f=elf/ldd.bash.in;h=d6b640df666c5e2d064175c31afa41eb5e63aa3d;hb=a0698a5e92ceeed3409d28623b1d599da6bc887d#l116 https://sourceware.org/git/?p=glibc.git;a=blob;f=elf/ldd.bas...