GNU GCC: Optimizer Removes Code Necessary for Security

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




When optimizing code for "dead store removal" the optimizing compiler may 
remove code necessary for security.

A programmer could erroneously think that his code is secure, even though 
the securing code is removed from the compiled code.

For a full report, including a complete description of the bug, steps 
necessary to reproduce the problem, a workaround, and sample code, go to:

http://gcc.gnu.org/cgi-bin/gnatsweb.pl?cmd=view%20audit-
trail&database=gcc&pr=8537


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux