Re: Call for testing: elftoolchain tools

2014-12-18 Thread Nikolai Lifanov
On 12/18/14 10:12, Ed Maste wrote:
 We have a rather outdated version of binutils in the base system.  As
 part of a project to update our toolchain I've started working on
 using some of the tools from the elftoolchain project.  There is now a
 build knob to enable the use of the following tools:
 
 * addr2line
 * elfcopy (strip)
 * nm
 * size
 * strings
 
 The knob (in /etc/src.conf) is:
 WITH_ELFTOOLCHAIN_TOOLS=yes
 
 The binutils version is still used for as, ld, objcopy, objdump and
 readelf; future projects will handle these.
 
 The option is being tested in ports exp-runs on amd64 and i386, and
 has had basic sanity testing on arm64 and mips64.
 
 I'm interested in test reports across a variety of hardware
 architectures and use cases.  If everything works as expected you
 should see no difference -- the tools should be drop-in replacements.
 
 -Ed
 ___
 freebsd-current@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-current
 To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org
 

I was running WITH_ELFTOOLCHAIN_TOOLS for a few days on head/amd64 and
clang350-import/amd64. Things build and work as before. I'm not seeing
any behavior differences.

- Nikolai Lifanov

___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org


Re: Call for testing: elftoolchain tools

2014-12-18 Thread Pedro Giffuni

FWIW,

A nice testing procedure, or even a pet project if generalized, would be 
to test the tools with a fuzzer like security/afl. Apparently the GNU 
binutils and Fedora elfutils developers having doing that [1].


Regards,

Pedro.

[1] 
https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-December/004346.html

___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org


Re: Call for testing: elftoolchain tools

2014-12-18 Thread Ed Maste
On 18 December 2014 at 11:53, Pedro Giffuni p...@freebsd.org wrote:
 test the tools with a fuzzer like security/afl

Yes, a very good idea, especially for strings(1) given the way it is
often used. I've already found a strings crash with afl.
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org


Re: Call for testing: elftoolchain tools

2014-12-18 Thread Allan Jude
On 2014-12-18 15:02, Ed Maste wrote:
 On 18 December 2014 at 11:53, Pedro Giffuni p...@freebsd.org wrote:
 test the tools with a fuzzer like security/afl
 
 Yes, a very good idea, especially for strings(1) given the way it is
 often used. I've already found a strings crash with afl.
 ___
 freebsd-current@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-current
 To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org
 

I cam across this not that long ago:

http://lcamtuf.blogspot.ca/2014/10/psa-dont-run-strings-on-untrusted-files.html

Our strings didn't crash with his proof of concept, but there may be
other similar bugs

-- 
Allan Jude



signature.asc
Description: OpenPGP digital signature