jfb added a comment.

Automatic narrowing of bugs is indeed compelling, so I'd support that as long 
as it:

- Allows bracketing as John suggested (lower / upper bounds where to stop / 
start).
- Is implemented in a way which makes it really hard to regress the security 
mitigation. Maybe this requires emitting a diagnostic when auto-init isn't 
applied because of the flag.
- Is thorough (i.e. it covers all auto-init, for example `initializeAlloca` was 
missing).

I'd also like to see the pragma attribute approach, as well as byte-pattern 
variability as I described. I don't think auto-narrowing is the only approach 
we should push people towards.


Repository:
  rG LLVM Github Monorepo

CHANGES SINCE LAST ACTION
  https://reviews.llvm.org/D77168/new/

https://reviews.llvm.org/D77168



_______________________________________________
cfe-commits mailing list
cfe-commits@lists.llvm.org
https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits

Reply via email to