Hello, On Monday, May 9, 2022 5:10:07 AM EDT Daniel P. Berrangé wrote: > On Fri, Jan 21, 2022 at 01:04:51PM -0500, Steve Grubb wrote: > > This is a continuation of the discussion from F36 Change: GNU Toolchain > > Update. > > snip. > > > He talks about -ftrivial-auto-var-init=zero being used for production > > builds and -ftrivial-auto-var-init=<pattern> being used for debug > > builds. The use is not just the kernel. Consider a server that returns > > data across the network to a client. It could possibly leak crypto keys > > or passwords if the returned data structure has uninitialized memory. > > snip > > > I think this would be an important step forward to turn this on across > > all compilations. We could wipe out an entire class of bugs in one fell > > swoop. > > Fast-forward a few months and I see GCC 12.1 is released now with > -ftrivial-auto-var-init option support [2]. > > Are you going to take this idea forward and make a formal change proposal > for Fedora to set -ftrivial-auto-var-init=zero by default in its default > RPM build flags ? I would like to see this happen. But I have not yet tested anything with the flag added. I was under the impression from someone on the gcc team that they wanted to look into this after 12.1 and all of the fallout from that is settled. Maybe now is the time to start looking into it? I'd need someone from the gcc team to partner on this as I don't have permissions to actually do this. Best Regards, -Steve > [1] https://gcc.gnu.org/gcc-12/changes.html > [2] > https://gcc.gnu.org/onlinedocs/gcc-12.1.0/gcc/Optimize-Options.html#index-> ftrivial-auto-var-init _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
