Re: Security patch for newsx version 1.4

on Thu, 3 Oct 2002 12:45:37 +0200 (CEST) Egil Kvaleberg <[email protected]> wrote:

> On Thu, 3 Oct 2002, you wrote:
>
>> The major problem seems to be finding libinn and libstorage.  I have
>> a newslib directory where these are, but for some reason it is being
>> ignored.  I put libinn.la in /usr/lib to get libinn to be found, but
>> I could never get it to find libstorage.a or storage.h even though I
>> pointed the include directory to the include directory from the inn
>> distribution.
>
> Can you enlighten please me on:
>
>         Which OS you are running?
Linux kernel 2.4.18 and Debian distribution.
>
>         Which INN?
inn-STABLE-20021002 
>
>         Did you compile/install an INN tarball, or did you install a
>         package of some sort? 
The tarball right from their snapshot directory.
>
>         Where, exactly, did your INN distribution put the above
>         files?
The libstorage.a  and libstorage.la versions and the libstorage.so
         links were put in the newslib directory which in my case is
         /var/spool/news/lib -- storage.h and other include files are
         not installed anywhere by default, I made a directory called
         inn under /usr/include and copied the include files from the
         include directory of the tar ball.  Config found the
         storage.h file once I had  done that, but tnothing I could
         do  could convince it to find the libstorage.a so I don't
         know where it got the one it put into the .lib directory --
         it wasn't a copy of the inn version.

>         
> 	Did you run ldconfig (if that is required on your system)?
The newslib is not normally in the ldconfig, but all the inn
components find the libraries correctly, when I actually run newsx I
set the environment variable LD_LIBRARY_PATH to the lib directory so
it can find the shared library files.

>>  What I finally did was to edit config.h to define
>> HAVE_LIBSTORAGE 1 and that made things compile properly, but when I
>> linked with the libstorage.a in your .libs directory, I got undefined
>> symbols, when I did the gcc command by hand and made sure to use the
>> inn libstorage.a, things worked fine.
>
> Perhaps it got the wrong libstorage? What were the undefined
> symbols?

I don't remember for sure, but SMinit was one of them if memory
serves.

The strange thing is that all the libstorage.a copies in my system
are the correct ones, so I don't know where it got the one it was
linking against.


-- 
         John Covici
         [email protected]

-----------------------------------------------------------------------
This message has been sent to you because you are subcribed to the mailing
list [email protected]. To remove yourself from this lists, send an email to
[email protected] containing "unsubscribe newsx <your_email_address>"
in the message body.