topic Re: Stripped programs and shared libraries for DST 2007 in Operating System - HP-UX

Stripped programs and shared libraries for DST 2007

Morris Makuch — Thu, 22 Feb 2007 15:31:05 GMT

Hi.

I ran the HP script dstivp which checks the O/S for 2007 DST readiness. I got 188 found stripped programs and shared libraries, mostly Oracle. Now I don't have a clue what stripped programs are and how to proceed on this. Any ideas?

Re: Stripped programs and shared libraries for DST 2007

A. Clay Stephenson — Thu, 22 Feb 2007 15:38:45 GMT

A "stripped" program is one on which, of all things, the "strip" command has been executed. It removes non-essential data from the program and thus reduces the size of the file and removes data from prying eyes for reverse engineering purposes. It's rather common to strip production code and is usually part of the makefile. Man strip and nm for details. As it pertains to you, the very data needed to make a determination for dst changes has been removed. It doesn't mean that the code is dst "unsafe" but it doesn't mean that it's "safe". There are insufficient data to make that call.

Re: Stripped programs and shared libraries for DST 2007

Dennis Handly — Thu, 22 Feb 2007 22:06:42 GMT

What symbols was dstivp looking for? For shared libs you can look at the dld symbol table.

>Clay: Man strip and nm

And ld(1) -s and -x.
For dld symbol tables, you need odump -slexport -slimport (PA32) and elfdump -s -n .dynsym.

>Clay: There are insufficient data to make that call.

Yes. If you are checking for RWZone and Place, one could make a binary pattern scanner.

Re: Stripped programs and shared libraries for DST 2007

gbruner — Thu, 01 Mar 2007 09:37:55 GMT

I have received this same problem with Oracle when running dstivp on my 11.23 servers.

When I run it on my 11.0 servers I get a different set of stripped programs:

/usr/admsnap/admsnapv2 no symbols
/usr/conf/modelstr no symbols
/usr/conf/reflash no symbols
/usr/etc/nfsstat no symbols
/usr/etc/rpcinfo no symbols
/usr/etc/rwall no symbols
/usr/etc/showmount no symbols
/usr/etc/spray no symbols
/usr/etc/ypserv no symbols

Not sure whether this presents a problem.

Re: Stripped programs and shared libraries for DST 2007

Dennis Handly — Thu, 01 Mar 2007 15:42:02 GMT

>Not sure whether this presents a problem.

Where did you get dstivp?

If it is looking for aC++ functions, I doubt those conf and /etc executables use aC++.

Re: Stripped programs and shared libraries for DST 2007

gbruner — Fri, 02 Mar 2007 15:26:01 GMT

I'm running version 15. It was sent to me and the others who attend HP DST Webinar last week.

Re: Stripped programs and shared libraries for DST 2007

Morris Makuch — Fri, 02 Mar 2007 15:29:56 GMT

Yes I got it off the Webinar also. I cannot find any info about stripped programs on Oracle's Metalink. Do I have anything to worry about?

Re: Stripped programs and shared libraries for DST 2007

Dennis Handly — Fri, 02 Mar 2007 17:42:54 GMT

>It was sent to me and the others who attend HP DST Webinar last week.

I saw a copy on another thread so I grabbed that.

>I cannot find any info about stripped programs on Oracle's Metalink. Do I have anything to worry about?

For Oracle, I don't think so. But if you don't know the owner, if it it is aC++, then you still have a big question mark.