Could not verify how this object file was built
Object file origin needs review
- Subject
- /home/bb/work/xz-5.6.0/src/liblzma/.libs/liblzma_la-crc64_fast.owritten by x86_64-linux-gnu-ld.bfd
- Jobs
- build
- Rule
- object-provenance
Witness chain
/home/bb/work/xz-5.6.0/tests/files/good-large_compressed.lzma
sourcepipe×5xz › head › sed › awk › xz
- pipexz -dc ../../tests/files/good-large_compressed.lzma
- pipehead -c +2048
- pipesed s/\(.\)/\1\n/g
- pipeawk BEGIN{FS="\n";RS="\n";ORS="";m=256;for(i=0;i<m;i++){t[sprintf("x%c",i)]=i;c[i]=((i*7)+5)%m;}i=0;j=0;for(l=0;l<4096;l++){i=(i+1)%m;a=c[i];j=(j+a)%m;c[i]=c[j]
- pipexz -dc --single-stream
/home/bb/work/xz-5.6.0/src/liblzma/liblzma_la-crc64-fast.ovia head -c +88792Input written by a non-compiler tool
/home/bb/work/xz-5.6.0/src/liblzma/liblzma_la-crc64-fast.o [dash]
/home/bb/work/xz-5.6.0/src/liblzma/.libs/liblzma_la-crc64_fast.ovia /usr/bin/ld --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -z relro -o .libs/liblzma_la-crc64_fast.o -r -Obfuscated toolchain bypassfrom pipeby xz
link input /home/bb/work/xz-5.6.0/src/liblzma/liblzma_la-crc64-fast.o: copied input a pipe: Written by xz from a pipe without a recorded source compilation
subjectmember
artifactmember
artifactmember
artifactmember
artifact
Evidence
- link input /home/bb/work/xz-5.6.0/src/liblzma/liblzma_la-crc64-fast.o: copied input a pipe: Written by xz from a pipe without a recorded source compilation
- /home/bb/work/xz-5.6.0/src/liblzma/liblzma_la-crc64-fast.o [dash]
Processes
build
systemd›sshd:›sshd-session:›…›sh›xz
- Ran
- xz -dc --single-stream
- Invoked by
- /usr/lib/systemd/systemd
Lineage · 22 processes
- systemd/usr/lib/systemd/systemd1
- sshd:sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups1107
- sshd-session:sshd-session: bb [priv]1737
- sshd-session:sshd-session: bb@notty1814
- sudosudo1815
- shsh1817
- runuserrunuser -u bb -- env RPM_ARCH=x86_64 RPM_OS=linux DEB_HOST_GNU_TYPE=x86_64-linux-gnu DEB_BUILD_GNU_TYPE=x86_64-linux-gnu DEB_HOST_ARCH=amd64 DEB_BUILD_ARCH=amd6…1851
- envenv RPM_ARCH=x86_64 RPM_OS=linux DEB_HOST_GNU_TYPE=x86_64-linux-gnu DEB_BUILD_GNU_TYPE=x86_64-linux-gnu DEB_HOST_ARCH=amd64 DEB_BUILD_ARCH=amd64 sh -c cd '/home…1852
- shsh -c cd '/home/bb/work/xz-5.6.0' && ./configure --enable-shared --build=x86_64-pc-linux-gnu >'/mnt/assets/configure.log' 2>&1 && make -j4 >'/mnt/assets/make.lo…1852
- makemake -j45467
- bash/bin/bash -c make all-recursive5470
- makemake all-recursive5470
- bash/bin/bash -c fail=; \
if (target_option=k; case ${target_option-} in ?) ;; *) echo "am__make_running_with_option: internal error: invalid" "target option '${tar…5471
- makemake all5476
- bash/bin/bash -c fail=; \
if (target_option=k; case ${target_option-} in ?) ;; *) echo "am__make_running_with_option: internal error: invalid" "target option '${tar…5477
- makemake all5482
- bash/bin/bash -c fail=; \
if (target_option=k; case ${target_option-} in ?) ;; *) echo "am__make_running_with_option: internal error: invalid" "target option '${tar…5483
- makemake all-am5489
- bash/bin/bash -c echo -n ''; export top_srcdir='../..'; export CC='gcc'; export DEFS='-DHAVE_CONFIG_H'; export DEFAULT_INCLUDES='-I. -I../..'; export INCLUDES=''; e…9304
- bash/bin/bash9308
- sh/bin/sh9313
- xzxz -dc --single-stream9368
Remediation
Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.
