DragonX/dragonx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Skip ELF-only sec-hard checks on non-ELF binaries

Browse Source
This commit is contained in:
Jack Grigg
2018-06-07 18:49:01 +12:00
parent 2802e321c1
commit 341a22ad90
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
qa/zcash/full_test_suite.py
View File

@@ -63,6 +63,13 @@ def check_security_hardening():
# PIE, RELRO, Canary, and NX are tested by make check-security. # PIE, RELRO, Canary, and NX are tested by make check-security.
ret &= subprocess.call(['make', '-C', repofile('src'), 'check-security']) == 0 ret &= subprocess.call(['make', '-C', repofile('src'), 'check-security']) == 0
# The remaining checks are only for ELF binaries
# Assume that if zcashd is an ELF binary, they all are
with open(repofile('src/zcashd'), 'rb') as f:
magic = f.read(4)
if not magic.startswith(b'\x7fELF'):
return ret
ret &= test_rpath_runpath('src/zcashd') ret &= test_rpath_runpath('src/zcashd')
ret &= test_rpath_runpath('src/zcash-cli') ret &= test_rpath_runpath('src/zcash-cli')
ret &= test_rpath_runpath('src/zcash-gtest') ret &= test_rpath_runpath('src/zcash-gtest')