Search results
abi3audit is a best-effort tool, with some of the same limitations as auditwheel. In particular: abi3audit cannot check for dynamic abi3 violations, such as an extension that calls dlsym(3) to invoke a non-abi3 function at runtime.
- Index
- Motivation
- Limitations
- Licensing
CPython (the reference implementation of Python) defines a stable API and correspondingABI ("abi3"). In principle, any CPython extension can be built against thisAPI/ABI and will remain forward compatible with future minor versions of CPython.In other words: if you build against the stable ABI for Python 3.5, yourextension should work without modif...
abi3audit is a best-effort tool, with some of the same limitations asauditwheel. In particular: 1. abi3audit cannot check for dynamic abi3 violations, such as an extensionthat calls dlsym(3)to invoke a non-abi3 function at runtime. 2. abi3audit can confirm the presence of abi3-compatible symbols, but doesnot have an exhaustive list of abi3-incompat...
abi3auditis licensed under the MIT license. abi3audit includes ASN.1 and Mach-O parsers generated fromdefinitions provided by the Kaitai Structproject.These vendored parsers are licensed by the Kaitai Struct authors under the MITlicense.
Nov 15, 2022 · TL;DR: Trail of Bits has developed abi3audit, a new Python tool for checking Python packages for CPython application binary interface (ABI) violations. We’ve used it to discover hundreds of inconsistently and incorrectly tagged package distributions, each of which is a potential source of crashes and exploitable memory corruption due to undetected ABI differences.
Oct 11, 2024 · C Storage Classes are used to describe the features of a variable/function. These features basically include the scope, visibility, and lifetime which help us to trace the existence of a particular variable during the runtime of a program. C language uses 4 storage classes, namely: Storage classes in C define the scope and lifetime of variables. To
Mar 31, 2024 · C/C++ compilers can't catch this however, since it's still a valid symbol -- you just need to know that it's not part of the stable API/ABI, and use tools like abi3audit to detect it. In practice , the above generally doesn't bite people: both Clang and GCC will normally respect the static inline and happily erase all references to Py_XDECREF , making it look as if the function was never called.
Mar 7, 2023 · Thanks @karlotness!. Yeah, there's a good chance that abi3audit is more conservative than strictly necessary here -- CPython is somewhat malleable in terms of its stability guarantees (as a function of how difficult it is to control API/ABI leakage), so abi3audit only tests for the things that it knows are considered stable.
People also ask
What is abi3audit?
What is abi3audit & CPython?
What are the limitations of abi3audit?
Why does abi3audit give a warning if a function is stabilized?
What does abi3audit do when auditing a shared object?
Does CPython support ABI3?
Nov 2, 2024 · Package Details: python-abi3audit 0.0.17-1. Package Actions. View PKGBUILD / View Changes Download snapshot Search wiki Git Clone URL: ...
