From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2582 invoked by alias); 2 Oct 2016 07:51:28 -0000 Mailing-List: contact libc-alpha-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libc-alpha-owner@sourceware.org Received: (qmail 2567 invoked by uid 89); 2 Oct 2016 07:51:27 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-3.9 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=Hx-languages-length:1003, shipped, eye X-HELO: albireo.enyo.de From: Florian Weimer To: Kostya Serebryany Cc: Andrew Pinski , Jakub Jelinek , Yuri Gribov , Maxim Ostapenko , GNU C Library Subject: Re: [PATCH BZ#20422] Do not allow asan/msan/tsan and fortify at the same time. References: <57CDAB08.8060601@samsung.com> <8d2403c8-466d-8f1a-e563-8b729deef9ce@redhat.com> <87lgyb9lhf.fsf@mid.deneb.enyo.de> <20160929100429.GQ7282@tucnak.redhat.com> <20160929104408.GR7282@tucnak.redhat.com> Date: Sun, 02 Oct 2016 07:51:00 -0000 In-Reply-To: (Kostya Serebryany's message of "Thu, 29 Sep 2016 14:23:32 -0700") Message-ID: <87fuofp4sq.fsf@mid.deneb.enyo.de> MIME-Version: 1.0 Content-Type: text/plain X-SW-Source: 2016-10/txt/msg00006.txt.bz2 * Kostya Serebryany: > 80 interceptors to support *san and fortification is 80 too many, IMHO. > The fact that other pre-compiled libraries use fortify by default is very sad. > I think this is a clear case of misuse of fortify because now users of > the library can't opt out. If we had some libc-unfortify.so DSO, you *could* opt out. > If someone is willing to provide a patch to sanitizers that is > * in sanitizer_common, > * uses a separate file for all of these 80 functions, > * does not touch any other file (in a significant way, at least) > * has tests > I'll most likely accept it. Why do you want to put this into sanitizer_common? It would make more sense to maintain this inside glibc, so that it can be updated in sync with fortification development. We can keep an eye on the ability to build the sources separately from glibc, to bridge the time until this DSO is routinely shipped as part of glibc.