New issue
Advanced search Search tips

Issue 856300 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 853266
Owner: ----
Closed: Jun 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug
Build-Toolchain



Sign in to add a comment

Asan builder: chrome-sandbox contains insecure RUNPATHs

Project Member Reported by rahulchaudhry@chromium.org, Jun 25 2018

Issue description

The amd64-generic-asan builder is failing due to insecure RUNPATHs in chrome-sandbox.
Builder link: https://ci.chromium.org/p/chromeos/builders/luci.chromeos.general/Prod/b8942770578790059920

From the logs:

chromeos-chrome-69.0.3464.0_rc-r1: scanelf: rpath_security_checks(): Security problem with DT_RPATH='$ORIGIN/.' in /build/amd64-generic/tmp/portage/chromeos-base/chromeos-chrome-69.0.3464.0_rc-r1/image/opt/google/chrome/chrome-sandbox with mode set of 4755
chromeos-chrome-69.0.3464.0_rc-r1: scanelf: rpath_security_checks(): Security problem with DT_RPATH='$ORIGIN/.' in /build/amd64-generic/tmp/portage/chromeos-base/chromeos-chrome-69.0.3464.0_rc-r1/image/opt/google/chrome/chrome-sandbox with mode set of 4755
chromeos-chrome-69.0.3464.0_rc-r1: 
chromeos-chrome-69.0.3464.0_rc-r1:  * QA Notice: The following files contain insecure RUNPATHs
chromeos-chrome-69.0.3464.0_rc-r1:  *  Please file a bug about this at http://bugs.gentoo.org/
chromeos-chrome-69.0.3464.0_rc-r1:  *  with the maintaining herd of the package.
chromeos-chrome-69.0.3464.0_rc-r1:  * $ORIGIN/. /build/amd64-generic/tmp/portage/chromeos-base/chromeos-chrome-69.0.3464.0_rc-r1/image/opt/google/chrome/chrome-sandbox
chromeos-chrome-69.0.3464.0_rc-r1: 
chromeos-chrome-69.0.3464.0_rc-r1:  * ERROR: chromeos-base/chromeos-chrome-69.0.3464.0_rc-r1::chromiumos failed:
chromeos-chrome-69.0.3464.0_rc-r1:  *   Aborting due to serious QA concerns with RUNPATH/RPATH

 
Mergedinto: 853266
Status: Duplicate (was: Untriaged)
Same as 853266 which is fixed but needs a Chrome uprev.

Sign in to add a comment