On Wed, Sep 27, 2017 at 02:43:50PM +0200, Jan Kurik wrote:
= Proposed System Wide Change: Annobin =
https://fedoraproject.org/wiki/Changes/Annobin
Change owner(s):
* Nick Clifton <nickc AT redhat DOT com>
This change causes extra information to be stored in binary files
compiled by gcc. This information can be used by scripts to check on
various features of the file, such as the hardening options used of
potential ABI conflicts.
== Detailed Description ==
The plan is to use a plugin to gcc to record extra information in the
object files it creates. This information can then be examined by
static analysis tools. The information is recorded in a compact,
extensible format, described here:
https://fedoraproject.org/wiki/Toolchain/Watermark
When this, or a similar proposal was made a while back on this list, I
asked how this would affect other languages which don't use the GCC
code generator and/or aren't affected by the usual C/C++ design
problems that require hardening. OCaml, Haskell, and any LLVM
language including C/C++ would be included in that list. I don't see
any mention of that in this proposal.
Rich.
--
Richard Jones, Virtualization Group, Red Hat
http://people.redhat.com/~rjones
Read my programming and virtualization blog:
http://rwmj.wordpress.com
virt-p2v converts physical machines to virtual machines. Boot with a
live CD or over the network (PXE) and turn machines into KVM guests.
http://libguestfs.org/virt-v2v