binary Hardening on linux using Relocation Read-Only (relro)

Claes Redestad claes.redestad at oracle.com
Mon Nov 25 23:15:35 UTC 2019



On 2019-11-25 18:30, Florian Weimer wrote:
> That being said, relocation processing for libjvm.so adds a couple of
> milliseconds to startup, and it looks like their number is growing with
> each release.

This piqued my interest, so I took a quick look:

readelf --relocs libjvm.so | wc -l

8: 85635
9: 112645
11: 105607
13: 107912
jdk/jdk: 106175

9 saw a big jump, yes, but things look pretty stable since, even
improving a bit (various cleanups and feature removals..?).

Of course improvements in this area would be most welcome (not an area
I've been paying attention to - maybe I should?)

Thanks!

/Claes



More information about the build-dev mailing list