From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by sourceware.org (Postfix) with ESMTPS id D2C933858D34 for ; Fri, 5 Apr 2024 17:26:56 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D2C933858D34 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=quicinc.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=quicinc.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org D2C933858D34 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=205.220.180.131 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712338019; cv=none; b=IZ/nOofUmReS1jSAuX03YyADYHCDstCE7TStexNePvQos/iLlaa9Ga/Nov6AQ8pC2OQDxhgMz/47rvt+9xAPxqceQu2+5n6DZEtiRsKYB+UsrEID0MF/PC2hAdCy+0LahwregmrLvel5SGeBWSoSyXYSJZYvku/5Ef6aQbSdIPE= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712338019; c=relaxed/simple; bh=o8nbfKfdeBqE+r7bJ4rzN3hoD1TMVBGDh7w1NJ+STyQ=; h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version; b=ZdcG6G+Kxc+Jm0rBpo1YD4WwdI5gla4dZ9EZ+RfS1L6XpEzrqTiLrQUQjyQCBbuJL5vonbbp2FY3OpwsIdhtIbtgBLx1OgPAjtfLPydfPVXwLwhnTnlx7h+K32TLYE1d/jk7B7qfSszaIqLhdqZRweIvE9t6Q7Xg8LmId/Tj8Js= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from pps.filterd (m0279873.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.17.1.24/8.17.1.24) with ESMTP id 435CfZsu003724; Fri, 5 Apr 2024 17:26:45 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quicinc.com; h= from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding:content-type; s= qcppdkim1; bh=h2/ffoXbue5hqWyQ2XG+cp9nP+o21/X04b+Ckw6pYGg=; b=Uz 79f+vs+dPARaI9t70Y9/PYNO1QccZ3zQva4VKS4FuA+5RReSJPkvVFpakJZEGCfe wGPvgZ03GQMitca7IsnX9b1HYHhQz0/8HnHbMDpZTmt+qOFTU7X3UJqGRBn7bpAw B/4k3IZOvZE9EQ/hrGxRcrJSodcXFIZtYwZuWNexQjUsCifcD9OEFrQnObSvnrvL W+YYCM5Mq6uMKFTqyCqACojhcTyu0Kh0rTjMuOOY5NDxunEabmhEtsIGpgzaWy6O 0Xlx8eLu+1aSC5vub9Dq/Hy6RhnR02OBYAoLwkOopCNRc2JJwSaMAMJfzq1qd3cW qAI02GeZpFLcJgA6SGRw== Received: from nalasppmta01.qualcomm.com (Global_NAT1.qualcomm.com [129.46.96.20]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 3xa8fc1vp8-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 05 Apr 2024 17:26:45 +0000 (GMT) Received: from nalasex01a.na.qualcomm.com (nalasex01a.na.qualcomm.com [10.47.209.196]) by NALASPPMTA01.qualcomm.com (8.17.1.5/8.17.1.5) with ESMTPS id 435HQiI6004461 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 5 Apr 2024 17:26:44 GMT Received: from hu-mathbern-lv.qualcomm.com (10.49.16.6) by nalasex01a.na.qualcomm.com (10.47.209.196) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Fri, 5 Apr 2024 10:26:44 -0700 From: Matheus Tavares Bernardino To: Mark Wielaard CC: Matheus Tavares Bernardino , , , , Subject: Re: [PATCH v3] Hexagon: implement machine flag check Date: Fri, 5 Apr 2024 14:26:34 -0300 Message-ID: <20240405172634.466095-1-quic_mathbern@quicinc.com> X-Mailer: git-send-email 2.37.2 In-Reply-To: <8e7a152d4e09050c5cf726b5353dced07330c9fa.camel@klomp.org> References: <8e7a152d4e09050c5cf726b5353dced07330c9fa.camel@klomp.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-Originating-IP: [10.49.16.6] X-ClientProxiedBy: nalasex01a.na.qualcomm.com (10.47.209.196) To nalasex01a.na.qualcomm.com (10.47.209.196) X-QCInternal: smtphost X-Proofpoint-Virus-Version: vendor=nai engine=6200 definitions=5800 signatures=585085 X-Proofpoint-GUID: HLSql30qvitxNmHCUO8UbgjC8kpLN_tS X-Proofpoint-ORIG-GUID: HLSql30qvitxNmHCUO8UbgjC8kpLN_tS X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-04-05_19,2024-04-05_01,2023-05-22_02 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 lowpriorityscore=0 mlxscore=0 malwarescore=0 mlxlogscore=999 bulkscore=0 suspectscore=0 clxscore=1015 priorityscore=1501 adultscore=0 phishscore=0 impostorscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2404010003 definitions=main-2404050122 X-Spam-Status: No, score=-5.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Fri, 05 Apr 2024 16:45:40 +0200 Mark Wielaard wrote: > > Hi Matheus, > > On Thu, 2024-04-04 at 16:56 -0300, Matheus Tavares Bernardino wrote: > > BTW, just out of curiosity, since the last incident with xz's backdoor > > (which apparently involved malicious code disguised as a test binary), > > has the elfutils community already considered using something like > > Dockerfiles to generate the tests/*.ko.bz2 binaries instead of checking > > than in the git repo? Just something that crossed my mind while I was > > developing these patches. > > [...] > In the xz-backdoor case it was actually hidden in a test binary which > wasn't actually used in the testsuite. So that is certainly something > to watch out for. Does someone add a binary file for no good reason? > Also this seems to be a somewhat sophisticated hack and the would > probably found some other way to hide something. Good point :) > Another would be what you suggest. Create containers for all arches > supported and (re)generate all test binaries in that container. But > that would be a lot of containers and for some arches you like to have > different versions of the tools to generate them. And can that be done > for all arches? e.g. Does hexagon have qemu support? It does :) But I was actually thinking about using the containers to cross-build the binaries, like we do for the QEMU tests. E.g. https://github.com/qemu/qemu/blob/master/tests/docker/dockerfiles/debian-hexagon-cross.docker Nonetheless, yeah, that will be a lot of containers, and a significant ammount of work.