Re: US-CERT Vulnerability Note VU#162289

[Ian Lance Taylor <iant at google dot com>]

"Robert C. Seacord" <rcs@cert.org> writes:

>>  What you really mean is,
>> "Use an older GCC or some other compiler that is known not to
>> take advantage of this optimization."
>>   
> i think we mean what we say, which is "*Avoid newer versions of gcc"
> and *"avoiding the use of gcc versions 4.2 and later."  i don't see
> any verbiage that says "use a different compiler".

I know I'm biased, but I think "use a different compiler" is clearly
implied by the text of the advisory.  If the advisory mentioned that
other compilers also implement the same optimization, then that
implication would not be there.

Ian