[Dnsmasq-discuss] Announce 2.85rc1 and security warning.

[Simon Kelley]

On 20/03/2021 11:11, Daniel via Dnsmasq-discuss wrote:
> 
> Le 19/03/2021 à 23:37, Simon Kelley a écrit :
>> On 18/03/2021 08:38, Daniel via Dnsmasq-discuss wrote:
>>> Hello
>>>
>>> Le 17/03/2021 à 22:48, Simon Kelley a écrit :
>>>> [...]
>>>>
>>>> https://thekelleys.org.uk/dnsmasq/release-candidates/dnsmasq-2.85rc1.tar.gz
>>>>
>>>>
>>> Thanks Simon. FYI I didn't get it compiled (as well as 2,84) on Debian
>>> Buster getting
>>>
>>> cc  -o dnsmasq cache.o rfc1035.o util.o option.o forward.o network.o
>>> dnsmasq.o dhcp.o lease.o rfc2131.o netlink.o dbus.o bpf.o helper.o
>>> tftp.o log.o conntrack.o dhcp6.o rfc3315.o dhcp-common.o outpacket.o
>>> radv.o slaac.o auth.o ipset.o domain.o dnssec.o blockdata.o tables.o
>>> loop.o inotify.o poll.o rrfilter.o edns0.o arp.o crypto.o dump.o ubus.o
>>> metrics.o hash_questions.o -ldbus-1   -lidn  -lnetfilter_conntrack
>>> -lnfnetlink -llua5.2 -lnettle -lhogweed
>>> /usr/bin/ld: crypto.o: undefined reference to symbol '__gmpz_init'
>>> /usr/bin/ld: //usr/lib/x86_64-linux-gnu/libgmp.so.10: error adding
>>> symbols: DSO manquant dans la ligne de commande
>>> collect2: error: ld returned 1 exit status
>>>
>>> It's working by adding -lgmp to nettle_cflags and nettle_libs
>>>
>>> nettle_cflags = `echo $(COPTS) | $(top)/bld/pkg-wrapper HAVE_DNSSEC
>>> $(PKG_CONFIG) --cflags 'nettle hogweed' -lgmp\
>>> HAVE_CRYPTOHASH $(PKG_CONFIG) --cflags nettle \
>>> HAVE_NETTLEHASH $(PKG_CONFIG) --cflags nettle`
>>> nettle_libs =   `echo $(COPTS) | $(top)/bld/pkg-wrapper HAVE_DNSSEC
>>> $(PKG_CONFIG) --libs 'nettle hogweed' -lgmp\
>>> HAVE_CRYPTOHASH $(PKG_CONFIG) --libs nettle \
>>> HAVE_NETTLEHASH $(PKG_CONFIG) --libs nettle`
>>>
>>> Cheers
>>>
>> How are you compiling? What command?
> 
> uname -a
> Linux keewi 4.19.0-14-amd64 #1 SMP Debian 4.19.171-2 (2021-01-30) x86_64
> GNU/Linux
> 
> . download tarball
> . untar
> . sudo make
> 
> Error. Add the -lgmp to both lines => works fine
> 

That doesn't make sense. The makefile in the tarball builds a binaery
which doesn't rely on any libraries other than libc when make is run
without arguments. Unless you've enabled DNSSEC, there should be no
dependency on libgmp.

Simon.