Developer Resources
Board support packages
Foundry27 projects
Forums
Home
Developer Resources
Technical Articles

QNX Technical Articles

QNX® Software Development Platform 6.5.0: LD_DEBUG_OUTPUT Security Vulnerability Patch (Patch ID 2324): Installation Note

QNX® Software Development Platform 6.5.0: LD_DEBUG_OUTPUT Security Vulnerability Patch (Patch ID 2324): Installation Note

Date of this edition: March 10, 2011

Target OS: This patch is compatible with targets that are running QNX® Neutrino® 6.5.0.

Host OS: In order to apply this patch, you must have installed the QNX Software Development Platform 6.5.0:

  • as a self-hosted QNX Neutrino development system
  • or on one of the following development hosts:
    • Microsoft Windows 7 Professional 32- and 64-bit, Vista Business 32- and 64-bit, XP Professional SP3, or 2000 SP4
    • Linux Red Hat Enterprise Linux 5.4 Desktop 32- and 64-bit, Red Hat Fedora 12, Ubuntu Workstation 9.10 32- and 64-bit, or openSUSE 11.2
Note: For information about the issues that this patch addresses, see the release notes.

This note includes:

Note: This patch also includes the updates from the DT_FINI_ARRAY Patch (Patch ID 2117):
  • If you install patch 2324, don't install patch 2117 later on.
  • If you installed patch 2117 and its updates to the symbol files, and you install patch 2324, you have to also install the updated symbol files for patch 2324, or else the symbol information will be out of sync.
  • If you uninstall the patches, do so in reverse order of installation (i.e., uninstall patch 2324 before uninstalling patch 2117). You must also restore the symbol files from your backups in the same reverse order.

Installing this patch

  1. Log in as root (or with administrator privileges on Windows).
  2. On Debian 3.1 hosts, set up your environment by typing: 
    source /etc/profile
  3. Download the patch-650-2324-DEBUG-OUTPUT.tar archive to your host environment.
  4. Verify that the patch's checksum matches the one given on our website.
  5. On Windows hosts, run cmd.exe.
  6. Use the applypatch utility to install the patch:
    • On Linux, if you use sudo (as would be the case on Ubuntu), you must specify the -E option to preserve the environment. In this case, the PATH environment variable is set to a safe one for security reasons, so you need to specify the full path to the utility: 
      sudo -E $QNX_HOST/usr/bin/applypatch patch-650-2324-DEBUG-OUTPUT.tar
    • On other hosts, type: 
      applypatch patch-650-2324-DEBUG-OUTPUT.tar

    For more information about applypatch, see its entry in the Utilities Reference.

Installing the updated symbol files (optional)

If you've installed the symbol files for QNX SDP 6.5.0, you should update them from the accompanying patch-650-2324-DEBUG-OUTPUT-sym.tar file that's in the Download area of our website. To install these files, do the following:

  1. Download patch-650-2324-DEBUG-OUTPUT-sym.tar from the Download area of our website into the working directory of your choice.
  2. Determine the base directory of your QNX SDP installation by opening a shell and using the qconfig command.
  3. cd base_directory
  4. Back up the following files:
    • target/qnx6/mipsbe/lib/libc.so.3.sym
    • target/qnx6/shle/lib/libc.so.3.sym
    • target/qnx6/mipsle/lib/libc.so.3.sym
    • target/qnx6/ppcbe-spe/lib/libc.so.3.sym
    • target/qnx6/armle-v7/lib/libc.so.3.sym
    • target/qnx6/x86/lib/libc.so.3.sym
    • target/qnx6/armle/lib/libc.so.3.sym
    • target/qnx6/ppcbe/lib/libc.so.3.sym
  5. tar -xvf path_to_working_dir/patch-650-2324-DEBUG-OUTPUT-sym.tar

Uninstalling this patch

  1. Log in as root (or with administrator privileges on Windows).
  2. On Debian 3.1 hosts, set up your environment by typing: 
    source /etc/profile
  3. On Windows hosts, run cmd.exe.
  4. Use the applypatch utility to install the patch:
    • On Linux, if you use sudo (as would be the case on Ubuntu), you must specify the -E option to preserve the environment. In this case, the PATH environment variable is set to a safe one for security reasons, so you need to specify the full path to the utility: 
      sudo -E $QNX_HOST/usr/bin/applypatch -U 2324
    • On other hosts, type: 
      applypatch -U 2324
Note: If you installed the updated symbol files, restore the previous versions from the backups you made.

Technical support

If you have any questions, comments, or problems with a QNX product, please contact Technical Support. For more information, see the How to Get Help chapter of the Welcome to the QNX Software Development Platform guide or visit our website, www.qnx.com.