[SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread Kenneth Van Wyk
FYI, here's an interesting article (and follow-on discussions) about a recent bug in the GCC compiler collection. http://lwn.net/Articles/278137/ The bug, which has been documented in a CERT advisory, affects C code in which, under some circumstances, buffer bounds checking can be optimize

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread Robert C. Seacord
Ken, Comment below. > FYI, here's an interesting article (and follow-on discussions) about a > recent bug in the GCC compiler collection. > > http://lwn.net/Articles/278137/ > > The bug, which has been documented in a CERT advisory, affects C code > in which, under some circumstances, buffer bou

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread der Mouse
> The bug, which has been documented in a CERT advisory, affects C code > in which, under some circumstances, buffer bounds checking can be > optimized out to produce binaries that are susceptible to buffer > overflows. [...] > Of course, many/most SC-Lers will no doubt jump on this as another >

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread Epstein, Jeremy
Ken, a good example. For those of you who want to reach much further back, Paul Karger told me of a similar problem in the compiler (I don't remember the language) used for compiling the A1 VAX VMM kernel, that optimized out a check in the Mandatory Access Control enforcement, which separates info

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread ljknews
At 1:00 PM -0400 5/1/08, Epstein, Jeremy wrote: > Ken, a good example. For those of you who want to reach much further > back, Paul Karger told me of a similar problem in the compiler (I don't > remember the language) VAX Pascal, before VMS was on Alpha (and long before Itanium). > used for com

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread Leichter, Jerry
| Ken, a good example. For those of you who want to reach much further | back, Paul Karger told me of a similar problem in the compiler (I don't | remember the language) used for compiling the A1 VAX VMM kernel, that | optimized out a check in the Mandatory Access Control enforcement, which | sepa

Re: [SC-L] GCC and pointer overflows [LWN.net]

2008-05-01 Thread ljknews
At 3:12 PM -0400 5/1/08, Leichter, Jerry wrote: > The VAX VMM effort died with the announcement of the Alpha, in late 1992 > - though obviously the death was decided internally once the move to > Alpha was decided, which would have been somewhat earlier. The origins > of the VAX VMM effort date b