[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Symbol conflict between libgnutls-openssl and real openssl
From: |
Tomas Mraz |
Subject: |
Symbol conflict between libgnutls-openssl and real openssl |
Date: |
Wed, 27 Aug 2008 17:15:15 +0200 |
Hello,
some symbols in libgnutls-openssl are not renamed from their originals
in OpenSSL. Unfortunately this causes conflicts when the application
indirectly links to some library which then links to openssl. The
situation can happen for example in case the system is configured to use
ldap in the nsswitch.conf.
The nss_ldap links to openldap libraries which is itself linked to the
real OpenSSL libraries. Some symbols are then resolved from real OpenSSL
and some from libgnutls-openssl which causes crashes because they are of
course ABI incompatible.
See:
https://bugzilla.redhat.com/show_bug.cgi?id=446860
and
https://bugzilla.redhat.com/show_bug.cgi?id=460310
The proposal is to use #defines in the public headers of
gnutls/openssl.h to rename the symbols so they do not clash with real
OpenSSL. It would of course require SONAME bump of libgnutls-openssl and
rebuild of the dependent applications.
What do you think about this proposal?
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
- Symbol conflict between libgnutls-openssl and real openssl,
Tomas Mraz <=
- Re: Symbol conflict between libgnutls-openssl and real openssl, Simon Josefsson, 2008/08/27
- Re: Symbol conflict between libgnutls-openssl and real openssl, Nikos Mavrogiannopoulos, 2008/08/27
- Re: Symbol conflict between libgnutls-openssl and real openssl, Nikos Mavrogiannopoulos, 2008/08/27
- Re: Symbol conflict between libgnutls-openssl and real openssl, Simon Josefsson, 2008/08/27
- Re: Symbol conflict between libgnutls-openssl and real openssl, Andrew McDonald, 2008/08/28
- Re: Symbol conflict between libgnutls-openssl and real openssl, Simon Josefsson, 2008/08/29
- Re: Symbol conflict between libgnutls-openssl and real openssl, Tomas Mraz, 2008/08/29