Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 16 Jul 2016 18:47:15 +0200
From: Daniel Cegiełka <daniel.cegielka@...il.com>
To: owl-dev@...ts.openwall.com
Subject: Re: passwdqc code quality

btw. I suspect that this error with memset resulted from the use of
LTO. Owl uses an old compiler, so this error could not occur.
Unfortunately, gcc-4.7.4 is the last compiler, which does not apply
aggressive and unsafe optimization. The worst part is that these types
of errors are very difficult to detect and probably need to use
fuzzers like Michal's AFL:

http://lcamtuf.coredump.cx/afl/

Daniel

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ