Is GCC really wrongly optimizing code leading to several bugs and vulnerabilities?

2013-11-24 Thread Thomas Goirand
Hi, I came across this paper: http://pdos.csail.mit.edu/~xi/papers/stack-sosp13.pdf From this PDF: We implement this approach in a static checker called Stack, and use it to show that unstable code is present in a wide range of systems software, including the Linux kernel and the Postgres

Re: Is GCC really wrongly optimizing code leading to several bugs and vulnerabilities?

2013-11-24 Thread Neil McGovern
On Sun, Nov 24, 2013 at 09:21:35PM +0800, Thomas Goirand wrote: http://pdos.csail.mit.edu/~xi/papers/stack-sosp13.pdf Thoughts anyone? See the thread on -security starting at 52900522.9040...@affinityvision.com.au Neil -- signature.asc Description: Digital signature

Re: Is GCC really wrongly optimizing code leading to several bugs and vulnerabilities?

2013-11-24 Thread Henrique de Moraes Holschuh
On Sun, 24 Nov 2013, Thomas Goirand wrote: I haven't checked for these facts myself due to lack of time, which is why I just post here. I think this paper is interesting anyway, and worth sharing. I read that paper sometime ago, and as far as I recall, it mostly deals with C code that has

Re: Is GCC really wrongly optimizing code leading to several bugs and vulnerabilities?

2013-11-24 Thread intrigeri
Hi, FYI there's an ongoing discussion on the debian-security list about this. Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc -- To UNSUBSCRIBE, email to

Re: Is GCC really wrongly optimizing code leading to several bugs and vulnerabilities?

2013-11-24 Thread Thomas Goirand
On 11/24/2013 09:52 PM, intrigeri wrote: Hi, FYI there's an ongoing discussion on the debian-security list about this. Thanks for the pointer. Let's keep it there, rather than -devel. Thomas -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe.