zlib

[Eric Eisenhart]

On Tue, Mar 12, 2002 at 11:41:35AM -0800, troy wrote:
> So, with the recently discovered problem with zlib, i've begun to wonder: 
> 
> How does one determine if a piece of software is statically linked to a
> given library?

Uhm...  I don't think you do...  Not really, not for sure.  AFAIK, there's
no fundamental difference between statically linking to a library and
statically linking to a collection of .o files.  (and most programs of any
size have a collection of .c files that compile to a collection of .o files
which are finally linked into an executable)

However, you can try:
objdump --syms --dynamic-syms /path/to/binary
and search for functions that are used in zlib.
(or maybe readelf or nm or something else in binutils does what you want...)

But I think this won't work unless debugging symbols are included...

Dynamic linking, OTOH, is easy:
ldd /path/to/binary

> [ http://www.gzip.org/zlib/advisory-2002-03-11.txt  ]

Also:
http://lists.debian.org/debian-security-announce/debian-security-announce-2002/msg00032.html
http://www.redhat.com/support/errata/RHSA-2002-026.html
http://www.cert.org/advisories/CA-2002-07.html
-- 
    Eric Eisenhart   Freedom is slavery.      http://eric.eisenhart.com/
 ^  ICQ#: 48217244   Ignorance is strength.   eric-dot-sig at eisenhart.com
/e\ Perl&SQL Coder   War is peace.            IRC Nicks: Falsch Freiheit
---                        -- George Orwell