https://gcc.gnu.org/bugzilla/show_bug.cgi?id=127315

Sam James <sjames at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sjames at gcc dot gnu.org

--- Comment #1 from Sam James <sjames at gcc dot gnu.org> ---
Yes, this is quite well-known:
https://www.openwall.com/lists/oss-security/2016/02/17/9

It's part of why the minimal runtime exists (trap-only w/ no runtime
configurability).

In the GCC docs for -fsanitize=*, we mention *_OPTIONS and link to
https://github.com/google/sanitizers/wiki/ThreadSanitizerFlags (and the others
respectively).

The wiki pages, which aren't ours, should be improved to mention this.

On the GCC side, we could perhaps briefly mention that log_path is known to be
unsafe.

Reply via email to