This is the mail archive of the gcc-patches@gcc.gnu.org mailing list for the GCC project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [objective-c] patch



On Mar 2, 2006, at 11:30 PM, Timothy J. Wood wrote:



On Mar 2, 2006, at 8:36 AM, Fariborz Jahanian wrote:



Couple of small objective-c patches to fix couple of problems. fsf-4327263.txt removes file name from module descriptor perceived as a potential security leak (our runtime guys have confirmed that it has no implications). fsf-4156731.txt fixes an ICE when issuing warning.
Mike Stump has approved these two patches.



If there are no implications, why remove a useful piece of information? Maybe you could write "" if -g is not on?


How is this perceived as a security risk?

Because it also includes the full path name to the source file which cannot be stripped out. We have had several complaints on this.


- Fariborz


-tim





Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]