https://sourceware.org/bugzilla/show_bug.cgi?id=34062

--- Comment #5 from Takao Sato <takaosato1997 at gmail dot com> ---
(In reply to Eric Botcazou from comment #4)
> > Thanks for your answer in that case is okay if I consider it as a security
> > issue.
> 
> But IA-64 is a dead architecture, so why wasting everyone's time by fuzzing
> a piece of software that nobody uses nowadays?

Thank you for your response, Eric.

You raise a fair point regarding IA-64 as an output target. To clarify our
intent: we are not advocating for IA-64 as a relevant platform. Our concern is
that the bug is reachable on modern x86_64 hosts through the multi-target
support compiled into standard distribution builds, and that a malformed
external object file can reliably crash the linker in those environments.

Regardless of how the project chooses to classify this — whether as a security
defect or a stability issue — we believe the underlying enforcement gap that
Alan described in comment #2 is worth addressing, as it affects users who may
not be aware that IA-64 backend code is active in their builds.

We appreciate the project's time and are happy to provide any additional
information that would help move toward a fix.

Best regards,
Takao Sato

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to