Be careful when using ldd.
"Under some circumstances [...] and with some versions of ldd [...], ldd may execute the given binary to determine the libraries it uses. Which means that running ldd on an untrusted binary could compromise your system."
Wait - what? 😳
While diagnosing a non-determinism Bazel issue at work, I had to compare the dynamic libraries used by two builds of the same binary. To do so, I used ldd(1) and I had to refer to its manual page to understand details of the output I had never paid attention to before. What I saw will surprise you: ldd can end up running the binary given to it, thus making it unsafe against untrusted binaries. Read on for the history I could find around this issue and what alternatives you have.
@holundra lol Thursday night I told my adult daughter it was so dark out that evidently there was no moon. She laughed and said “Mom, it’s a Wolf full moon!” (To maintain my dignity I replied that heavy clouds must have totally obscured it… )
#DidNotKnow #WolfMoon #MildlyAmusing #BrainFartVersusTotallyOblivious #Laugh
usbs-usa
Torsten Curdt
SPQR
Michael Slade
Cynthia