← Back to issue list

Linting about execstack in libraries

View original Github issue

Metadata

Project
snapcraft
Number
#5842
Type
issue
State
open
Author
soumyaDghosh
Labels
—
Created
Updated
Closed
—

Current evaluation

Snapcraft’s library linter does not report executable stacks in shared libraries, although Store review can block upload; ELF detection exists, but no linter check or maintainer triage is present.

Suggested action: needs triage

Reason: LibraryLinter currently exposes only unused-library and missing-library categories, while ElfFile already detects executable PT_GNU_STACK segments through execstack_set, making this a well-grounded enhancement. However, the issue has no labels, maintainer response, reproducer, or agreed diagnostic severity, so it still requires triage.

Evaluated by: mr-cal-bot

Impact: 52 Quick Win: 23 Complexity: 36 Confidence: 91 Actionability: 68

Issue body

### What needs to get done While creating a snap, snapcraft linters doesn't complain about execstacks in libraries. But whenever we upload this in the store, these lint issues block the upload. It'd be great for snapcraft to be able to lint about these libraries with execstack. ### Why it needs to get done This would simply the upload process for snaps, where all the possible problems can be caught even before the snap hits the store/review-tools.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 52
Quick Win: 23
Complexity: 36
Confidence: 91
Actionability: 68
needs triage Snapcraft’s library linter does not report executable stacks in shared libraries, although Store review can block upload; ELF detection exists, but no linter check or maintainer triage is present.
qwen/qwen3.6-35b-a3b
Impact: 40
Quick Win: 17
Complexity: 40
Confidence: 65
Actionability: 70
needs triage Feature request to add execstack linting for libraries in snapcraft's linter system. Store review-tools block uploads with execstack libraries, but local snapcraft lint doesn't catch this. Open 332 days with no maintainer response.
qwen/qwen3.8-27b
Impact: 35
Quick Win: 21
Staleness: 65
Complexity: 40
Confidence: 78
Support Request: 10
needs triage Feature request to add execstack linting for libraries in snapcraft linters, so store upload blockers are caught before submission. Unlabelled, no maintainer response, 313 days old with zero comments.
qwen/qwen3.6-35b-a3b
Staleness: 80
Complexity: 25
Confidence: 75
Support Request: 10
needs triage Feature request to add execstack linting for libraries in snapcraft to catch store upload blockers early. Currently unlabelled and inactive for 9 months.
qwen3.6-35b-a3b-mtp-q6
Staleness: 80
Complexity: 25
Confidence: 85
Support Request: 5
needs triage Feature request to add execstack library checks to snapcraft linters to prevent store upload blocks. Currently unlabelled and inactive for 258 days with no maintainer response.

Update history

No update history recorded yet.

Related work

  • Related To: snapcraft#2783 (confidence 88%)

    Merged PR added optional pre-push Store review checks that report findings as warnings, but did not add an execstack-specific library-linter check.

  • Related To: snapcraft (launchpad)#1790004 (confidence 82%)

    A broader open request asks Snapcraft to warn locally when the Store would reject a produced snap.

Related issues

No related issues found above the similarity threshold.