This is the mail archive of the
gcc@gcc.gnu.org
mailing list for the GCC project.
Re: US-CERT Vulnerability Note VU#162289
From: Chad Dougherty <crd@cert.org>
Date: Wed, 23 Apr 2008 08:37:11 -0400
> David Miller wrote:
> > How, may I ask, did that policy apply to the GCC "vendor"
> > when this all got started?
>
> Our own testing of multiple versions of gcc on multiple platforms and
> subsequent confirmation by Mark that it was intentional, desired
> behavior. This all occurred prior to even the initial version of the note.
CERT is asking these vendors for "approval" for the text they will add
mentioning anything about their product. That's the bit I'm talking
about.
They are getting protection and consideration that was not really
afforded to GCC.
CERT treated GCC differently.