[Python-Dev] Compiler security

2013-10-31 Thread MRAB
Has anybody here heard about this, and, if so, is it anything we should be thinking about: How your compiler may be compromising application security http://www.itworld.com/security/380406/how-your-compiler-may-be-compromising-application-security ___

Re: [Python-Dev] Compiler security

2013-10-31 Thread Christian Heimes
Am 31.10.2013 15:48, schrieb MRAB: Has anybody here heard about this, and, if so, is it anything we should be thinking about: How your compiler may be compromising application security http://www.itworld.com/security/380406/how-your-compiler-may-be-compromising-application-security

Re: [Python-Dev] Compiler security

2013-10-31 Thread Guido van Rossum
Interesting read. I'm surprised that the researchers didn't contact us, since the article mentions they found 5 bugs in Python. Regarding security: the article seems to use that term mostly to attract eyeballs; there are no specifics, just the implication that this *could* affect security. But

Re: [Python-Dev] Compiler security

2013-10-31 Thread Benjamin Peterson
I believe the 5 problems they found in Python were dealt with here http://bugs.python.org/issue17016 2013/10/31 MRAB pyt...@mrabarnett.plus.com: Has anybody here heard about this, and, if so, is it anything we should be thinking about: How your compiler may be compromising application

Re: [Python-Dev] Compiler security

2013-10-31 Thread Christian Heimes
Am 31.10.2013 15:48, schrieb MRAB: Has anybody here heard about this, and, if so, is it anything we should be thinking about: How your compiler may be compromising application security http://www.itworld.com/security/380406/how-your-compiler-may-be-compromising-application-security I

Re: [Python-Dev] Compiler security

2013-10-31 Thread Serhiy Storchaka
31.10.13 16:56, Benjamin Peterson написав(ла): I believe the 5 problems they found in Python were dealt with here http://bugs.python.org/issue17016 Ah, now I have remembered author's name. http://bugs.python.org/issue18684 contains some other fixes of this kind.

Re: [Python-Dev] Compiler security

2013-10-31 Thread Terry Reedy
On 10/31/2013 10:57 AM, Christian Heimes wrote: I didnt' see this at first: STACK was run against a number of systems written in C/C++ and it found 160 new bugs in the systems tested, including ... and Python (5). Has anybody contact us? I neither saw a bug report nor a mail to