[tor-bugs] #13359 [Tor Browser]: Linux: update fails because bundled libstdc++.so.6 is not found

[Tor Bug Tracker & Wiki]

#13359: Linux: update fails because bundled libstdc++.so.6 is not found
-----------------------------+----------------------
     Reporter:  mcs          |      Owner:  gk
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  ff31-esr
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by mikeperry):

 The problem with our -rpath setting was that it was to a fixed path that
 wasn't actually in use (/home/ubuntu/install/lib, IIRC). The argument by
 the commenter was that an "ubuntu" username on the machine might be able
 to create this path with a library in it, to compromise other users. I
 don't think the same argument applies to a relative rpath.

 If we can set a "$ORIGIN" -rpath relative to the current directory, we may
 have people complaining about things like #12736, but ultimately I don't
 think it is any worse than always LD_LIBRARY_PATH to the same directory.

 If I had to guess, there's probably code somewhere in the installation of
 updates in Firefox that is calling execle or execvpe with a blank
 environment. We could add LD_LIBRARY_PATH back in to this environment.

 I think a relative rpath is probably a cleaner solution though?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13359#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online