[gentoo-dev] checdeps.rb for getting deps out of elf files

[gentoo-dev] checdeps.rb for getting deps out of elf files

[Petteri Räty]

[-- Attachment #1: Type: text/plain, Size: 343 bytes --]

http://dev.gentoo.org/~betelgeuse/scripts/checkdeps.rb
Some people will probably find this useful. Basically it does ldd on all
the elf files in a package and then checks to which packages those
libraries belong. I think portage people are working on integrating
something like this to portage in the form of verify-rdepend.

Regards,
Petteri

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Thomas de Grenier de Latour]

On Fri, 23 Dec 2005 13:09:08 +0200
Petteri Räty <betelgeuse@gentoo.org> wrote:

> Basically it does ldd on all the elf files in a package and then
> checks to which packages those libraries belong. 

I don't think "ldd" alone is the way to go, because it doesn't make
distinction beetween direct and indirect links, and thus real and
deep deps. 
To give you the idea, there's a patch in this thread for Spider's
"depreverse" script, which shows how to filter "ldd" output to keep
only NEEDED libs (using "objdump" here, although it would be doable
with "scanelf" too nowdays):
http://thread.gmane.org/gmane.linux.gentoo.devel/27288

--
TGL.

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Mike Frysinger]

On Fri, Dec 23, 2005 at 01:09:08PM +0200, Petteri R??ty wrote:
> Basically it does ldd on all
> the elf files in a package and then checks to which packages those
> libraries belong.

ldd is garbage for this purpose

use `readelf -d ELF | grep NEEDED` or just `scanelf -n ELF`
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Petteri Räty]

[-- Attachment #1: Type: text/plain, Size: 863 bytes --]

Mike Frysinger wrote:
> On Fri, Dec 23, 2005 at 01:09:08PM +0200, Petteri R??ty wrote:
> 
>>Basically it does ldd on all
>>the elf files in a package and then checks to which packages those
>>libraries belong.
> 
> 
> ldd is garbage for this purpose
> 
> use `readelf -d ELF | grep NEEDED` or just `scanelf -n ELF`
> -mike

Adjusted to using scanelf:

http://dev.gentoo.org/~betelgeuse/scripts/checkdeps.rb

This has the side affect that the library location code is not used
until I code or take the logic from glibc from example.

betelgeuse@pena ~/bin $ checkdeps.rb subversion
dev-libs/apr
dev-libs/apr-util
dev-libs/expat
dev-libs/openssl
dev-util/subversion
net-misc/neon
sys-libs/db || app-office/openoffice-bin
sys-libs/gdbm
sys-libs/glibc
sys-libs/zlib


Old ldd using version:
http://dev.gentoo.org/~betelgeuse/scripts/checkdepsldd.rb

Regards,
Petteri

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Paul de Vrieze]

[-- Attachment #1: Type: text/plain, Size: 1028 bytes --]

On Tuesday 27 December 2005 23:12, Petteri Räty wrote:
>
> This has the side affect that the library location code is not used
> until I code or take the logic from glibc from example.
>
> betelgeuse@pena ~/bin $ checkdeps.rb subversion
> dev-libs/apr
> dev-libs/apr-util
> dev-libs/expat
> dev-libs/openssl
> dev-util/subversion
> net-misc/neon
> sys-libs/db || app-office/openoffice-bin
> sys-libs/gdbm
> sys-libs/glibc
> sys-libs/zlib

Unfortunately scanelf also doesn't know (nor can it know) that some libraries 
like apr-util do not link against the libraries they need, but leave it for 
users to link against them properly by means of the apu-config utility. As 
such subversion could link against libldap. It does however not depend on 
libldap, as this comes from apr-util. Perhaps this means that apr-util should 
be fixed, but it certainly does not mean that subversion missed a dep.

Paul

-- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@gentoo.org
Homepage: http://www.devrieze.net

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Petteri Räty]

[-- Attachment #1: Type: text/plain, Size: 1299 bytes --]

Paul de Vrieze wrote:
> On Tuesday 27 December 2005 23:12, Petteri Räty wrote:
> 
>>This has the side affect that the library location code is not used
>>until I code or take the logic from glibc from example.
>>
>>betelgeuse@pena ~/bin $ checkdeps.rb subversion
>>dev-libs/apr
>>dev-libs/apr-util
>>dev-libs/expat
>>dev-libs/openssl
>>dev-util/subversion
>>net-misc/neon
>>sys-libs/db || app-office/openoffice-bin
>>sys-libs/gdbm
>>sys-libs/glibc
>>sys-libs/zlib
> 
> 
> Unfortunately scanelf also doesn't know (nor can it know) that some libraries 
> like apr-util do not link against the libraries they need, but leave it for 
> users to link against them properly by means of the apu-config utility. As 
> such subversion could link against libldap. It does however not depend on 
> libldap, as this comes from apr-util. Perhaps this means that apr-util should 
> be fixed, but it certainly does not mean that subversion missed a dep.
> 
> Paul
> 

I just picked some package as an example of the output with
openoffice-bin. My understanding here is that if you link against those
libraries, it will break break binary packages because dependencies
don't say to pull in required libraries. This just means that apr-util
should be fixed.

Regards,
Petteri


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Paul de Vrieze]

[-- Attachment #1: Type: text/plain, Size: 795 bytes --]

On Wednesday 28 December 2005 17:26, Petteri Räty wrote:
>
> I just picked some package as an example of the output with
> openoffice-bin. My understanding here is that if you link against those
> libraries, it will break break binary packages because dependencies
> don't say to pull in required libraries. This just means that apr-util
> should be fixed.
>

By the way, you might want to check the locations of libraries. Openoffice-bin 
does not satisfy the dependency for the db library. It namely is outside the 
library search path (and it should be). You might want to use ld.so.conf with 
the rpath attribute of the binary to determine which libraries to consider.

Paul

-- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@gentoo.org
Homepage: http://www.devrieze.net

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Petteri Räty]

[-- Attachment #1: Type: text/plain, Size: 982 bytes --]

Paul de Vrieze wrote:
> On Wednesday 28 December 2005 17:26, Petteri Räty wrote:
> 
>>I just picked some package as an example of the output with
>>openoffice-bin. My understanding here is that if you link against those
>>libraries, it will break break binary packages because dependencies
>>don't say to pull in required libraries. This just means that apr-util
>>should be fixed.
>>
> 
> 
> By the way, you might want to check the locations of libraries. Openoffice-bin 
> does not satisfy the dependency for the db library. It namely is outside the 
> library search path (and it should be). You might want to use ld.so.conf with 
> the rpath attribute of the binary to determine which libraries to consider.
> 

Working on it with solar. I just put the || in there until I have
something better. Thinking about libstdc++-v3 having all the
alternatives is also useful. Developers should know that the one from
openoffice is not used.

Regards,
Petteri


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[solar]

On Wed, 2005-12-28 at 21:52 +0200, Petteri Räty wrote:
> Paul de Vrieze wrote:
> > On Wednesday 28 December 2005 17:26, Petteri Räty wrote:
> > 
> >>I just picked some package as an example of the output with
> >>openoffice-bin. My understanding here is that if you link against those
> >>libraries, it will break break binary packages because dependencies
> >>don't say to pull in required libraries. This just means that apr-util
> >>should be fixed.
> >>
> > 
> > 
> > By the way, you might want to check the locations of libraries. Openoffice-bin 
> > does not satisfy the dependency for the db library. It namely is outside the 
> > library search path (and it should be). You might want to use ld.so.conf with 
> > the rpath attribute of the binary to determine which libraries to consider.
> > 
> 
> Working on it with solar. I just put the || in there until I have
> something better. Thinking about libstdc++-v3 having all the
> alternatives is also useful. Developers should know that the one from
> openoffice is not used.

We just added -L to be used with -n in scanelf(pax-utils-0.1.6) to 
search the ld.so.cache. It works in uclibc and glibc environments and 
handles 32/64 bit dupes. We can't verify any of the *BSD's at this time 
however as we no access to one of it's caches. 

-- 
solar <solar@gentoo.org>
Gentoo Linux

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Mike Frysinger]

On Wednesday 28 December 2005 11:11, Paul de Vrieze wrote:
> Unfortunately scanelf also doesn't know (nor can it know)

no utility will be able to passively calculate dependencies that happen via 
dlopen() or any similar dynamic library loading interface
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] checdeps.rb for getting deps out of elf files

[Paul de Vrieze]

[-- Attachment #1: Type: text/plain, Size: 655 bytes --]

On Wednesday 28 December 2005 21:13, Mike Frysinger wrote:
> On Wednesday 28 December 2005 11:11, Paul de Vrieze wrote:
> > Unfortunately scanelf also doesn't know (nor can it know)
>
> no utility will be able to passively calculate dependencies that happen via
> dlopen() or any similar dynamic library loading interface

What happens here is not so much dlopen as just not linking it in the proper 
library. I don't know whether to blame libtool or apr-util itself. But it's 
not clean to say the least. It happens more often though.

Paul

-- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@gentoo.org
Homepage: http://www.devrieze.net

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]