[Adding Laura] On Fri, Dec 08, 2017 at 06:18:45PM -0800, Joe Perches wrote: > On Sat, 2017-12-09 at 12:27 +1100, Tobin C. Harding wrote: > > On Fri, Dec 08, 2017 at 01:22:37PM -0800, Joe Perches wrote: > > > > Outside of the documentation, what could be useful is for > > > someone to add a tool to verify %p<foo> extension to > > > the typeof address actually passed as an argument. > > > > This sounds interesting to work no. At first glance I have no idea how > > one would go about this. Some form of static analysis would be a good > > place to start, right? I'd like to allocate some cycles to this, any > > pointers most appreciated. > > A gcc-plugin would likely work best.
What's the learning curve like in your opinion to do a gcc-plugin. I recall reading someplace 'deep understanding of how the compiler works' or some such thing. I suppose reading the Dragon book would be a good place to start? We could also catch pointers being cast to longs and printed with %x (and %u) or so I would guess. > There was some discussion about such a thing here: > http://www.openwall.com/lists/kernel-hardening/2017/02/14/38 Did you make much progress with this Laura? > I vaguely recall someone else doing a broader use tool > which I believe was not smatch, but my google-fu isn't > finding it. > > It might have been coccinelle based. thanks, Tobin.