Re: RFC: attributes for marking security boundaries (system calls/ioctls, user vs kernel pointers etc)

2021-04-30 Thread Andi Kleen via Gcc
David Malcolm via Gcc writes: > I think I want a way for the user to be able to mark security > boundaries in their code: for example: > * in the Linux kernel the boundary between untrusted user-space data > and kernel data, or, > * for a user-space daemon, the boundary between data coming from

Re: RFC: attributes for marking security boundaries (system calls/ioctls, user vs kernel pointers etc)

2021-04-29 Thread Martin Sebor via Gcc
On 4/29/21 11:18 AM, David Malcolm wrote: I've been going through old Linux kernel CVEs, trying to prototype some possible new warnings for -fanalyzer in GCC 12 (and, alas, finding places where the analyzer internals need work...) I think I want a way for the user to be able to mark security

RFC: attributes for marking security boundaries (system calls/ioctls, user vs kernel pointers etc)

2021-04-29 Thread David Malcolm via Gcc
I've been going through old Linux kernel CVEs, trying to prototype some possible new warnings for -fanalyzer in GCC 12 (and, alas, finding places where the analyzer internals need work...) I think I want a way for the user to be able to mark security boundaries in their code: for example: * in