From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id 80F153858437 for ; Tue, 8 Nov 2022 12:47:14 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 80F153858437 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1667911634; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=JFFcAZ/WM7Vn9VpRe7xeXqfAzonHhVCbUzyIqXyRxQs=; b=a3nzg/NqMaSKIZQM4IAvxzJ6ZzmMeIRV7Q4BIpVUZdxyZYs4BCdH/20bL94n7++UJkiQsl YGho+yQlvHg8hc4RuWLRuarWnSoJTUWbwhdKlFso/pKCnbet99LH9rPyLKfiV3Ek06rGfD a1t9ozoej4CUmKRnbUei7Tw2rT1L9KI= Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_128_GCM_SHA256) id us-mta-107-xJYrMJ8yME60E7MVo9R2LQ-1; Tue, 08 Nov 2022 07:47:13 -0500 X-MC-Unique: xJYrMJ8yME60E7MVo9R2LQ-1 Received: by mail-wm1-f69.google.com with SMTP id c10-20020a7bc84a000000b003cf81c2d3efso3809912wml.7 for ; Tue, 08 Nov 2022 04:47:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:subject:from:references:cc:to :content-language:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=JFFcAZ/WM7Vn9VpRe7xeXqfAzonHhVCbUzyIqXyRxQs=; b=qOjxo5ZqOK9Ck7DRv3wzRDrq+qGVX0BP+1xteIjSeIfukp22Nwtd2OmjLl8wYnz6ks eil7Vu7/ujVjErlCK9897ImdLX37UKkaW3vixKViER5yn2O/pPyk5z5WzvY/yrkl/u6F nsrM0dubMqCboS9aQot4wL/jW6NtRA5XgnwBQ/q5EAx+tPQc1FxW/9ZXtxymAKgKFb3W jTvJGYSL2iSimtJlBZF1dYkXRL4ZhMpuqvp8aeNfi2peZmxM7cMWPnwnHosWPyQ55Ssj UulB+GBy4Oe3sxtzRe2LRNkCIKdoMPVZTDcGHa7r+9wbZFfU//JK2JQ6GUCmTe//880y yLmw== X-Gm-Message-State: ACrzQf10gRFEakxEWxEPJ/md5PAaEam+ItsYQfm9TteVhDvw/cwj7VTg 9/bkF/rlmFpm+wIkNa+kNUOWnZwe1JKlyORmwXabJC3fznlYRP8d0s9f9oZOzQtdnAfimkSL/6F 3F7PZJD7hn/5J0+jawg== X-Received: by 2002:a05:6000:702:b0:236:c65e:dcbd with SMTP id bs2-20020a056000070200b00236c65edcbdmr737858wrb.62.1667911631848; Tue, 08 Nov 2022 04:47:11 -0800 (PST) X-Google-Smtp-Source: AMsMyM5LO8Hyuw9yNgfDNOB0TbPfgIjRAuZZCm7UtgZeRHefe4ClbxCB8LwCOBbFFkvFDtDzfRk9Hg== X-Received: by 2002:a05:6000:702:b0:236:c65e:dcbd with SMTP id bs2-20020a056000070200b00236c65edcbdmr737856wrb.62.1667911631686; Tue, 08 Nov 2022 04:47:11 -0800 (PST) Received: from [192.168.1.18] (adsl-164-85.freeuk.com. [80.168.164.85]) by smtp.gmail.com with ESMTPSA id a17-20020a05600c225100b003c6d21a19a0sm10992289wmm.29.2022.11.08.04.47.10 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 08 Nov 2022 04:47:11 -0800 (PST) Message-ID: <3f1a02fc-398f-cd89-32df-80dd1657a33f@redhat.com> Date: Tue, 8 Nov 2022 12:47:10 +0000 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.4.1 To: Stephan Lipp Cc: =?UTF-8?Q?Marcel_B=c3=b6hme?= , Thorsten Holz , "Pretschner, Alexander" , "Hassler, Keno" , =?UTF-8?Q?Philipp_G=c3=b6rz?= , Binutils References: <99fa0211-c6d0-acd4-975b-852dff21219e@tum.de> From: Nick Clifton Subject: Re: Automated vulnerability detection In-Reply-To: <99fa0211-c6d0-acd4-975b-852dff21219e@tum.de> X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-GB Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Hi Stephan, > Do you use static analysis tools or fuzzers to test Binutils (2.29)? Yes and no. We - the GNU Biuntils project - do not use static analysers or fuzzers directly. But there are quite a few groups out there who do use these tools to analyse the binutils sources and report problems that they find. We are always pleased to receive these reports and investigate the issues that they find. Aside - I assume that referring to version "2.29" in your email is a typo and that you meant 2.39. Version 2.29 is quite old now. > We are happy to share any insights from our analysis which might be also helpful to you. Thank you very much in advance! If you do find bugs in the binutils sources we are always happy to receive them. If you can, it really helps us if you are able to file bug reports via the bur reporting system found here: https://sourceware.org/bugzilla/enter_bug.cgi?product=binutils Cheers Nick