ClickHouse/utils/link-validate/link-validate.sh

#/bin/sh
#
# This script is used to validate the shared libraries
#
# Authors: FoundationDB team, https://github.com/apple/foundationdb/blame/master/build/link-validate.sh
# License: Apache License 2.0

verlte() {
    [  "$1" = "`echo -e "$1\n$2" | sort -V | head -n1`" ]
}

ALLOWED_SHARED_LIBS=("libdl.so.2" "libpthread.so.0" "librt.so.1" "libm.so.6" "libc.so.6" "ld-linux-x86-64.so.2")

if [ "$#" -lt 1 ]; then
    echo "USAGE: link-validate.sh BINNAME GLIBC_VERSION"
    exit 1
fi

# Step 1: glibc version

for i in $(objdump -T "$1" | awk '{print $5}' | grep GLIBC | sed 's/ *$//g' | sed 's/GLIBC_//' | sort | uniq); do
    if ! verlte "$i" "${2:-2.10}"; then
        echo "Dependency on newer libc detected: $i"
        exit 1
    fi
done

# Step 2: Other dynamic dependencies

for j in $(objdump -p "$1" | grep NEEDED | awk '{print $2}'); do
    PRESENT=0
    for k in ${ALLOWED_SHARED_LIBS[@]}; do
        if [[ "$k" == "$j" ]]; then
            PRESENT=1
            break
        fi
    done
    if ! [[ $PRESENT == 1 ]]; then
        echo "Unexpected shared object dependency detected: $j"
        exit 1
    fi
done