This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]

Re: cccp

To: gcc at gcc dot gnu dot org
Subject: Re: cccp
From: Steve Beattie <steve at wirex dot net>
Date: Tue, 17 Apr 2001 18:38:42 -0700
Organization: WireX Communications, Inc.
References: <718D38CAB6E0D011B2C90060970C28A564286A@exchangeserver.pixelpower.com> <7-7y-w5Hw-B@khms.westfalen.de>

On Wed, Apr 18, 2001 at 12:44:00AM +0200, Kai Henningsen wrote:
> It also makes it *very* dangerous to *compile* untrusted source. Do you  
> really want to feature gcc on bugtraq and risks?

Erm, while I agree that the proposed feature does significantly increase
the risks involved, how many people do you really believe audit
makefiles (with all the random odd files they include) to verify that
nothing nasty is done in them?

It is already dangerous to compile untrusted sources, especially those
with as complex build processes as gcc or glibc has.

-- 
Steve Beattie                               Don't trust programmers? 
<steve@wirex.net>                         Complete StackGuard distro at
http://immunix.org/~steve/                         immunix.org

References:
- RE: cccp
  - From: David Korn
- Re: cccp
  - From: Kai Henningsen

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]