Skip ELF-only sec-hard checks on non-ELF binaries

This commit is contained in:
Jack Grigg 2018-06-07 18:49:01 +12:00
parent 2802e321c1
commit 341a22ad90
No known key found for this signature in database
GPG Key ID: 1B8D649257DB0829
1 changed files with 7 additions and 0 deletions

View File

@ -63,6 +63,13 @@ def check_security_hardening():
# PIE, RELRO, Canary, and NX are tested by make check-security.
ret &= subprocess.call(['make', '-C', repofile('src'), 'check-security']) == 0
# The remaining checks are only for ELF binaries
# Assume that if zcashd is an ELF binary, they all are
with open(repofile('src/zcashd'), 'rb') as f:
magic = f.read(4)
if not magic.startswith(b'\x7fELF'):
return ret
ret &= test_rpath_runpath('src/zcashd')
ret &= test_rpath_runpath('src/zcash-cli')
ret &= test_rpath_runpath('src/zcash-gtest')