This is the mail archive of the
gcc@gcc.gnu.org
mailing list for the GCC project.
Re: RFC: Treat plugins as first class citizens
- From: Aldy Hernandez <aldyh at redhat dot com>
- To: Jeff Law <law at redhat dot com>
- Cc: Richard Biener <richard dot guenther at gmail dot com>, Nick Clifton <nickc at redhat dot com>, GCC Development <gcc at gcc dot gnu dot org>
- Date: Mon, 20 Mar 2017 05:26:33 -0400
- Subject: Re: RFC: Treat plugins as first class citizens
- Authentication-results: sourceware.org; auth=none
- Authentication-results: ext-mx04.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com
- Authentication-results: ext-mx04.extmail.prod.ext.phx2.redhat.com; spf=pass smtp.mailfrom=aldyh at redhat dot com
- Dkim-filter: OpenDKIM Filter v2.11.0 mx1.redhat.com 58F8380489
- Dmarc-filter: OpenDMARC Filter v1.3.2 mx1.redhat.com 58F8380489
- References: <87vardgkxe.fsf@redhat.com> <CAFiYyc3rFWLP2E+sYRQ_A00ijd76s21npFuHHE1Xp6X=46hKWQ@mail.gmail.com> <354ea3ff-7c79-0f15-6cbc-e629c9270955@redhat.com> <CAFiYyc3p0EcWYQWXFY3M=Vs6_gBCAwaM8+mSk7MncKFZF1KB2Q@mail.gmail.com> <bd47a79b-7d7a-449c-c23b-9c0449fe3ba2@redhat.com>
- Reply-to: aldyh at redhat dot com
Jeff Law <law@redhat.com> writes:
>> If you build sth as part of GCC then why is it a plugin in the first place?
> I think we want plugins for domain-specific analysis. Having a
> repository for well developed checkers makes sense to me, particularly
> for checkers which are useful across projects.
>
> One such checker would be Aldy's unencrypted function pointer checker
> which finds unencrypted function pointers living in memory (which are
> ripe for exploitation by hackers). It's currently most useful for
> glibc which has policies WRT unencrypted function pointers, but could
> well be used by other projects.
FYI:
https://developers.redhat.com/blog/2017/03/17/diagnosing-function-pointer-security-flaws-with-a-gcc-plugin/