[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-18 Thread Julian Andres Klode
I want to note the discussions on clang which recommend pattern instead of zero, as zero hides bugs and creates a new stuff. They did not intend to support zero long term. https://reviews.llvm.org/D54604 https://reviews.llvm.org/D64742 -- You received this bug notification because you are a

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-18 Thread Julian Andres Klode
Oh I have another question: Does this actually turn accessing the uninitialized variables into defined behavior, or can the optimizer still treat it as undefined behavior and thus do whatever it want? Given that this *is* undefined behavior, turning it into defined behavior with a 0 value would

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-18 Thread Alex Murray
doko can you please provide more details on why you think this should be done in dpkg instead of gcc (as we have done for almost all the other hardening options)? As Kees says, adding it to gcc means not only does this benefit Ubuntu archive packages, but also any software which is built on a

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-16 Thread Steve Beattie
** Tags added: sec-994 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build flags To manage notifications about this bug go to:

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-12 Thread Kees Cook
Adding it to the compiler means *all* builds benefit, which is the reason this was done on the other options. People build their local projects, newer versions of tools from GitHub, etc etc. This needs to be in the compiler directly. -- You received this bug notification because you are a

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-12 Thread Brian Murray
** Tags removed: rls-kk-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build flags To manage notifications about this bug

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-12 Thread Brian Murray
** Also affects: dpkg (Ubuntu Kinetic) Importance: Undecided Status: New ** Also affects: gcc-12 (Ubuntu Kinetic) Importance: Wishlist Status: New ** Changed in: dpkg (Ubuntu Kinetic) Importance: Undecided => Wishlist ** Tags added: fr-2368 -- You received this bug

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-12 Thread Matthias Klose
please not, add it to dpkg instead ** Also affects: dpkg (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-10 Thread Brian Murray
** Tags added: rls-kk-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build flags To manage notifications about this bug go

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-08 Thread Alex Murray
+1 from the Security team on this - looks like a good easy win for security with no overhead or other impact from what I can see. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-07 Thread Kees Cook
Yes, -Wuninitialized continues to warn, even if they were auto- initialized. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-07 Thread Tobias Heider
** Changed in: gcc-12 (Ubuntu) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build flags To

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-07 Thread Julian Andres Klode
Does Wuninitialized continue working with that flag? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1972043 Title: Please add -ftrivial-auto-var-init=zero to default build flags To manage