Bump the minimum required version of glibc to 2.34 #36692
Conversation
|
@evverx Do you have any idea to bump CIFuzz (I guess it uses oss-fuzz, right) image to Ubuntu 22.04 or newer, or change from CIFuzz to different fuzzing infra? It seems oss-fuzz still uses Ubuntu 20.04, which will EOL soon. BTW, what is ClusterFuzzLite ? Why it is skipped in most cases (or all cases) ? |
|
It seems ClusterFuzz also uses Ubuntu 20.04: |
|
To judge from google/oss-fuzz#13018 it should take a while for OSS-Fuzz to bump their images.
It's expensive to run fuzz targets continuously 24/7 so there aren't a lot of testing infrastructures where it can be done for free. There was another fuzzing infrastructure used by systemd back in the day but it was acquired by GitLab as far as I can remember.
ClusterFuzzLite is like CIFuzz but it can work with forks properly. The idea was to cover systemd-stable. With stable branches here it can be revisited probably (then again I don't consume stable branches so to me it doesn't matter much what's going on there). |
|
@evverx Thanks. So, there is nothing we can do. Let's wait for the image used by oss-fuzz being updated. |
As commented in 24845c4, the current glibc versions used by major distributions are CentOS 9: 2.34 CentOS 10: 2.39 Fedora 40: 2.39 Fedora 41: 2.40 Fedora 42: 2.41 Ubuntu 20.04 LTS (focal): 2.31 -- EOL on 2025-04 Ubuntu 22.04 LTS (jammy): 2.35 Ubuntu 24.04 LTS (noble): 2.39 Ubuntu 24.10 (oracular): 2.40 Debian 11 (Bullseye, oldstable): 2.31 -- EOL on 2024-08 Debian 12 (Bookworm, stable): 2.36 openSUSE SLE-15-SP6: 2.38 openSUSE Tumbleweed: 2.40 However, Debian 11 already EOL, and Ubuntu 20.04 LTS will EOL on 2025-04, and the next version (v258) is not expected to be released before the end of 2025-04. Hence, we can bump the baseline to glibc-2.34. Note, glibc-2.34 was released on 2021-08-02. it is more than 4 years ago. With the bumping, we can drop several further workarounds.
As now our baseline for glibc is 2.34.
We can assume GRND_INSECURE in sys/random.h, as it is defined since glibc-2.32.
Now our baseline for glibc is 2.34, hence mallinfo2() can be used (when built with glibc), and we can drop use of deprecated mallinfo().
44816ee to
98ac214
Compare
No description provided.