old intentional gcc bug?
Brooks Moses
brooks.moses@codesourcery.com
Sun Jun 24 00:26:00 GMT 2007
Robert Dewar wrote:
> OK, interesting, thanks for info, I had always thought that this
> was purely conceptual.
One thing (which Erik didn't mention) that I noticed in the articles is
that Ken said that in his implementation he also hacked the disassembler
to cover up the evidence.
> Of course there is nothing special about open source/free software
> that makes such attacks more possible. On the contrary, since gcc
> can always be built using third party C compilers, it would be
> much easier to smoke out and eliminate any such behavior (indeed
> this example shows the merit of maintaining the property that gcc
> can be compiled by non-gcc compilers), although we have not been
> able to maintain that property for the Ada front end.
Indeed. It would be interesting to confirm whether or not a copy of gcc
bootstrapped with a non-gcc compiler matched byte-for-byte with a copy
of gcc bootstrapped from gcc. Not so much to look for intentional
things like this, but to see whether the bootstrapping actually does
achieve its goal of obtaining a result that's independent of the
bootstrapping compiler. Has anyone actually tried it?
- Brooks
More information about the Gcc
mailing list