Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Siddhesh Poyarekar
On 2023-09-20 08:29, Jakub Jelinek wrote: I just noticed (ENOCOFFEE) that the line (after removing libvtv) is: Support libraries such as libiberty, libcc1 and libcpp have been developed separately to share code with other tools such as binutils and gdb. Does that address your

Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Jakub Jelinek
On Wed, Sep 20, 2023 at 08:23:32AM -0400, Siddhesh Poyarekar wrote: > On 2023-09-20 07:58, Siddhesh Poyarekar wrote: > > On 2023-09-20 07:55, Jakub Jelinek wrote: > > > On Wed, Sep 20, 2023 at 07:50:43AM -0400, Siddhesh Poyarekar wrote: > > > > +    Support libraries such as libiberty, libcc1

Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Jakub Jelinek
On Wed, Sep 20, 2023 at 07:58:04AM -0400, Siddhesh Poyarekar wrote: > On 2023-09-20 07:55, Jakub Jelinek wrote: > > On Wed, Sep 20, 2023 at 07:50:43AM -0400, Siddhesh Poyarekar wrote: > > > +Support libraries such as libiberty, libcc1 libvtv and libcpp have > > > > Missing comma before

Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Siddhesh Poyarekar
On 2023-09-20 07:58, Siddhesh Poyarekar wrote: On 2023-09-20 07:55, Jakub Jelinek wrote: On Wed, Sep 20, 2023 at 07:50:43AM -0400, Siddhesh Poyarekar wrote: +    Support libraries such as libiberty, libcc1 libvtv and libcpp have Missing comma before libvtv.  But more importantly, libvtv is

Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Siddhesh Poyarekar
On 2023-09-20 07:55, Jakub Jelinek wrote: On Wed, Sep 20, 2023 at 07:50:43AM -0400, Siddhesh Poyarekar wrote: +Support libraries such as libiberty, libcc1 libvtv and libcpp have Missing comma before libvtv. But more importantly, libvtv is not support library like libiberty, libcpp, it is

Re: [PATCH] Add a GCC Security policy

2023-09-20 Thread Jakub Jelinek
On Wed, Sep 20, 2023 at 07:50:43AM -0400, Siddhesh Poyarekar wrote: > +Support libraries such as libiberty, libcc1 libvtv and libcpp have Missing comma before libvtv. But more importantly, libvtv is not support library like libiberty, libcpp, it is more like the sanitizer libraries runtime

[PATCH] Add a GCC Security policy

2023-09-20 Thread Siddhesh Poyarekar
Define a security process and exclusions to security issues for GCC and all components it ships. Signed-off-by: Siddhesh Poyarekar --- Sending as a proper patch since there have been no further comments on the RFC. I toyed with the idea of making the distinction of "exploitable vulnerability"