Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

No secure compilation option is used for .so file compilation #1231

Closed
ertong0129 opened this issue Jan 15, 2025 · 2 comments
Closed

No secure compilation option is used for .so file compilation #1231

ertong0129 opened this issue Jan 15, 2025 · 2 comments

Comments

@ertong0129
Copy link

Describe the bug
A clear and concise description of what the bug is.
The following .so files do not use secure compilation options, which may cause security risks:

  • /org/sqlite/native/FreeBSD/aarch64/libsqlitejdbc.so
  • /org/sqlite/native/FreeBSD/x86_64/libsqlitejdbc.so
  • /org/sqlite/native/FreeBSD/x86/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Android/aarch64/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Android/x86_64/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Android/x86/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Android/arm/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Musl/aarch64/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Musl/x86_64/libsqlitejdbc.so
  • /org/sqlite/native/Linux-Musl/x86/libsqlitejdbc.so
  • /org/sqlite/native/Linux/armv7/libsqlitejdbc.so
  • /org/sqlite/native/Linux/ppc64/libsqlitejdbc.so
  • /org/sqlite/native/Linux/aarch64/libsqlitejdbc.so
  • /org/sqlite/native/Linux/x86_64/libsqlitejdbc.so
  • /org/sqlite/native/Linux/x86/libsqlitejdbc.so
  • /org/sqlite/native/Linux/armv6/libsqlitejdbc.so
  • /org/sqlite/native/Linux/arm/libsqlitejdbc.so

To Reproduce
Provide a sample code that reproduces the error.

Expected behavior
A clear and concise description of what you expected to happen.
Secure compilation options are used during the compilation of the C++ SO file.

Logs
If applicable, provide logs.

Environment (please complete the following information):

  • OS: [e.g. Windows 7]
  • CPU architecture: [e.g. x86_64, arm64]
  • sqlite-jdbc version [e.g. 3.39.2.0]

Additional context
Add any other context about the problem here.

Our security detection system has detected that the following secure compilation options are not enabled:

  • BIND_NOW
  • NX(The stack is not executable.)
  • RELRO(GOT table protection)
  • SP(Stack protection)
  • FS(Fortify Source)
@gotson
Copy link
Collaborator

gotson commented Jan 16, 2025

seems to be the same as #1229 ?

@michael-o
Copy link
Contributor

seems to be the same as #1229 ?

I agree. I'd close as dup.

@gotson gotson closed this as completed Feb 3, 2025
@gotson gotson added duplicate and removed triage labels Feb 3, 2025
# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

3 participants