From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.littlepinkcloud.com (bookofsand.co.uk [93.93.131.130]) by sourceware.org (Postfix) with ESMTPS id 2299F3858D33 for ; Sat, 6 Apr 2024 13:09:13 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 2299F3858D33 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=littlepinkcloud.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=littlepinkcloud.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 2299F3858D33 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=93.93.131.130 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712408954; cv=none; b=Sati0mX7/zhWbu2ZxySBEoVC7vEAknFqf9fOIkH4x2nAUft2d+usgfTFe0VtaYhtk53eQvXvJ+w2CpwfTJEJLy5qwpfuOcYGP43KoF4q1pgrmJLEZm31dscUx7T3vIRmv1/eDc0lZ1LRVea7lM4qTZyfqY4em044nqSrsYEcEJc= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712408954; c=relaxed/simple; bh=1DmN1wD5lF0A0s/0OLRmOnxmpzRoUCsSAZCD80pE7pE=; h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From; b=oHtZmUzsJnoRSfUE85WtkeXcSqXideGZa7C2wpC/Rf6xRPxItmx5T9t/h355iguhVyvlbMTTdgNEU6ZE6NHsWqJQ++JrfSySKGbI+Dxv0ssLhi1QG9mQl3xQa5uVvlkHVqkLdAcuQ+/LDUXJ49gV8BGW16w1WNbO6Kjp6NA7Ops= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from [10.0.0.8] (cpc1-cmbg20-2-0-cust972.5-4.cable.virginm.net [86.21.219.205]) by mail.bookofsand.co.uk (Postfix) with ESMTPSA id 7A4FBD57; Sat, 6 Apr 2024 14:09:11 +0100 (BST) DKIM-Filter: OpenDKIM Filter v2.11.0 mail.bookofsand.co.uk 7A4FBD57 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=littlepinkcloud.com; s=default; t=1712408951; bh=1DmN1wD5lF0A0s/0OLRmOnxmpzRoUCsSAZCD80pE7pE=; h=Date:Subject:To:References:From:In-Reply-To:From; b=IBhb0bKTLkPSNWmUSnY2cQ2+6jeTgRjgVw4+UHNsFz2kH7ljxQ4Nvdl8384HQmPCU 8eed39jgQyoAPWsXQTYRnVzEWDC4IpeyMLH4CJvvcB+WFJnWfF/lzerZdDYzc06mTN FxiZoA3JjCk1pzyDaN3Bhl6Mwo0WH5SNTLF0VPAk= Message-ID: Date: Sat, 6 Apr 2024 14:09:10 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Sourceware mitigating and preventing the next xz-backdoor To: "gdb@sourceware.org" References: <20240329203909.GS9427@gnu.wildebeest.org> <20240401150617.GF19478@gnu.wildebeest.org> <12215cd2-16db-4ee4-bd98-6a4bcf318592@cs.ucla.edu> <6239192ba9ff8aad0752309a54b633dc75a57c77.camel@tugraz.at> <8e877d2f-01e0-c786-dea5-265edbdc0c07@suse.de> Content-Language: en-US From: Andrew Haley Autocrypt: addr=aph-open@littlepinkcloud.com; keydata= xsBNBEoRZWsBCACUiFkb5YgfOfTHmzkESkfmTri14VX9UKdv4TUu9l9S6gFKf56ihWChiG8H pQ6CDTb5uqtZCWBNXoqcC2uCR0SCnWGk46tAW9dO0roEjoP+6AgbY4V5xUZt963XONYu1gnN EDQPB1QKN5L3PCMn0Dwnl1F6Of5BMPc+ErXr2BuMAG5Rb9QJPuWEjP4rMJdQIxeVkSk7oTnm rQJnDPF3WPimgwtaDGC17lZLwt4U9az9PobZxFH8lphexrwGdZX8qxQZEs9qfpW/wY/KFbRf bzSGNJlFd3X1liTofZQpNv+hloOS0/C1xLOQea4nCWlRZHiVpLywrmk0e1aFjqPNVN7NABEB AAHNVEFuZHJldyBIYWxleSAoQW5kcmV3IEhhbGV5J3MgRk9TUyBtYWlsaW5nIGxpc3QgYWxp YXMpIDxhcGgtb3BlbkBsaXR0bGVwaW5rY2xvdWQuY29tPsLAjgQTAQgAOBYhBOrIQ+vT79uY zHcvraXNYDUzL6ZxBQJieUnKAhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEKXNYDUz L6ZxdnYH/2VI18yCzbE2nAyOYeoS8DriEPfCJkl5fJyR4RVW5CkfR5PJTNZ+EuYINLP3AIjA /EX1SfVIwsfUdr7CvptKoq2nh2rS5r1ixjKFid/ESHZuORGM2RNOENb1CfWu80adTUAnqgaT QdU3MuVshGHRLvqWVFfz7smX30M+z9YBzQjy4pbHJ4AabwteHVTQl94rgq8RxkoW+uBIrljM JuH26VFcRX3PCIrMkOHnMdbwC6CVn89BwizjUkXGPOwd2pMAKoclPnQKp7nUTUnBr1+HDwo1 kYecw3kopdm2JgXmtBrO9spS6oVwcR7S0P4+KfvwGtHmlqTvNLaNo26C7dAwjmnOwE0EShFl mwEIAJ7tS9BC28YJNpKVvxL49WFgTKbUangZnBnnkKVbDMw06DbLQVFu4mEhVfvvtukXIPEg 41v+M2j9xM4KDeqUbubOSvQtvUef5cKU04j4vWir5u2vgPbHOWZWbKzaZk1ve5Jf1fnkuAsk 3rXd/jAendfTGXMppWGQreEQ4OGrP+LP4xO9ZhjOW8+/YmzlA2MhuoW+hsUkboxOqqq0wwXI IQf8aoPv3GrCMZ+NHbc4JM7zhlCDboyQ/XRttUz36TqwPkE66iEREeXZ1f+iWutSP/+UvkrE rZbCEKVz2FhmVAGf3OOvbnv6NyXPDEKxyyHKJ+aoJsX/t7G2IvcieRERxVcAEQEAAcLAXwQY AQgACQUCShFlmwIbDAAKCRClzWA1My+mcWNBCACUgT/XjBKTYwFkvf8AmV3d8FTz2aBwbNGZ TEQ+ClZLD9UbLuffGfXlvi7qRJviDOSM3vd4df7J+yZs08oNYCkbXlqhPbA7giKVQ4I6CfCb YEL9U454gr4gIQ3IMgKQlxYaxAD6EwQkJzMUSAu0kLTjX6e35FHdWmf2VHR6NbyuV5O/yzf/ 3iNallmocZIK5I0zY5ndbptd4vEWX4KdR6d5D1AZrsnlLoFkIPR0WZfzfPtwiW6WVm6upSOQ XEEA4YH3sNEFyywihqbp88Fx7BRKRtIS27/FmbZjZ70N1rA99ld8cGmMha+ylFs4gBmDIpvK FLxlCiZFH7qEnyv4b73q In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_PASS,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 4/3/24 15:56, Stephen Webb via Gdb wrote: > Using feature detection is entirely unnecessary if you guarantee you're > only every going to target self-hosted builds on x86_64-linux-gnu > running on recent commodity server or desktop hardware. > > For everything else, yes, it's absolutely required. Not even x86_64-linux-gnu can escape. We recently added a feature detection macro to one upstream project because a useful library was forced to break its ABI, in turn because of a symbol conflict with other libraries. Shit happens. Autoconf is for then. -- Andrew Haley (he/him) Java Platform Lead Engineer Red Hat UK Ltd. https://keybase.io/andrewhaley EAC8 43EB D3EF DB98 CC77 2FAD A5CD 6035 332F A671