https://bugzilla.mindrot.org/show_bug.cgi?id=3584

Darren Tucker <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #3 from Darren Tucker <[email protected]> ---
(In reply to Carlo Cabrera from comment #2)
> Do you have a recommendation on which workaround is better to adopt?

IMO you'd be better off with the compiler hardening flags rather than
-Os.  Things like -ftrapv could mitigate what would otherwise be a
vulnerability.

If you want to investigate further, you could enumerate the flags added
by --with-hardening (which will depend on what the compiler supports,
you could diff Makefile generated with and without) and add them to
CFLAGS one at a time along with -Os and see if you can narrow down
which of them triggers the problem.

(I tried installing xcode 14.3 to reproduce but my test mac doesn't
support a new enough OSX version to do that.)

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to