From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-lj1-x234.google.com (mail-lj1-x234.google.com [IPv6:2a00:1450:4864:20::234]) by sourceware.org (Postfix) with ESMTPS id 2CA28384645B; Wed, 3 Apr 2024 16:56:49 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 2CA28384645B Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 2CA28384645B Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=2a00:1450:4864:20::234 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712163411; cv=none; b=KPejMVvSfXVnoscxLWUulbKZmUL7W35jZRx/xvXNZZ5W2FdMS+vR0QoCCRuWS+ChJ0j5zFmMr5UuUM1yiZTeCajXCk4drfjiOWYzMgtlnojwAAAxtvTlzhuC2rINqBAu4OR1mQy6FbsQSyYLhsPGb7UDPpSb8BCxzIgkUUVLUJk= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712163411; c=relaxed/simple; bh=3NY/feCVjOMNFX9ePTCzJRq4PWmi+vl2AitrHbkTq0Y=; h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To; b=QCBLoBUlQ4qCY28Kck9tJl5K+dlX8TIeE85AmaaNnD7n4Fv8rvl8abmeEVOF2Y4gg0l6bj+Y7XCZ4Fmp/u3qbGtX12v7jXYVGwZ15lgAR3UtP3oMxFH0WnxGWDdp59DrP+wiDFbMEexXeEmggM7ne8qPVvBiha5CFzmJFABwfl0= ARC-Authentication-Results: i=1; server2.sourceware.org Received: by mail-lj1-x234.google.com with SMTP id 38308e7fff4ca-2d82713f473so331461fa.3; Wed, 03 Apr 2024 09:56:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1712163408; x=1712768208; darn=sourceware.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=JPqGSwQqqVw0CDbAiZ4HmCsyuUIDnBpwmUTGjzLlro8=; b=Pgas0sxORNXFxr84hwMcY7IZQH4IPNw7F+PYXoTlUbqoo66vfZm9UjAtHaPf7DMk/w NlvUNLK4bnSR9iR99T4MOlNclsFNJFZVy8gwdXy4WlLPNAcXh/Kjx3KTWr3QfPhyuXuw hGh7W5qgqP2rpEqEks+4g9QVzo5wqawTjDv2LkK4SPzhKvg888VJcmOP4YoVuem/h9Vx gWkGob+quPs0j8kuAk6uFG8nzWSPkmX/93z6kdQJ5vBqKcJWuaf2k6r8vlHS592UBUIX s8HlDn1Q/ziVN5c9IweypVxID+Dg+kT49sGaRWFEh/+VJYojaEFMZ0/d84b48+iS7p+J kL8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712163408; x=1712768208; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=JPqGSwQqqVw0CDbAiZ4HmCsyuUIDnBpwmUTGjzLlro8=; b=GjwE8wyEMFiTK5NM5huCKKbTL2r9rIR0OeJB8sLOmGREUiQV8wSTo77qr5bf5/yiyx VrF0gciqJDhpd6bHdvfPYUnvsoup9oWKLo/Wtr1taJgPs8Eo9xYN4PjPpiFJnMfMD6OE C0bMLcXXIXOYwnSp9XR5uORS1AJeCMLuFnFHz8vAl36OdgTXuIY0GS8136Iwu3+rWdoU lqKhyMkP5rZy6Vj3H7soaY6EGndMxqYL0u9nhXeAnW+1ePJzfqClmD1tuVbaRbFUn0TI erADD4Dc3dhvFyaFzg3Q4SN6yCJ5uAfnkwlL4XJYEDa6Wf6x1x5GtCq15m7hTHx65d2R pa+w== X-Forwarded-Encrypted: i=1; AJvYcCX6MhmwzusYGJxvlkQgBr5I0BVpdLMGdbG9eSD+ln80DZfDg3tbki++8EjLITdY2wyeCEHf2xmIArFvx0NNGLr0DjdJL7r1v2eKGV/RHMnjMazrZKNiCdvWdCE7nRrPJE1D6ADLUnQHXGszbCWyMRfe8CWU3dJQNjim5/W+pIwghKYT7G2QcCyr+wed0v1xzQM= X-Gm-Message-State: AOJu0YzFLfBTT2xTkGLDiIMpMoa2X9vdZFiKJU7BIqudz+0W2ofzkFOi OFzyV/iiKLp2U+rpWqnJ4GV2wmPrI4aYGd6TKmrqIzU5ZXDR/o7n6KNkNu3rmtlbtXgZ9pb+XqY Wv7NjQO0dpAKZziLHWKyAMrhim6A= X-Google-Smtp-Source: AGHT+IHzjx98BsYnmAja7d0mB6t4suesvUQrcPxBzmaNieyOX8eL/foFjkEX3RqvXB5ThNkK7dDIUGLd6ONttCq+wTo= X-Received: by 2002:a05:651c:1189:b0:2d5:acde:9065 with SMTP id w9-20020a05651c118900b002d5acde9065mr110370ljo.34.1712163407413; Wed, 03 Apr 2024 09:56:47 -0700 (PDT) MIME-Version: 1.0 References: <20240329203909.GS9427@gnu.wildebeest.org> <20240401150617.GF19478@gnu.wildebeest.org> <12215cd2-16db-4ee4-bd98-6a4bcf318592@cs.ucla.edu> <6239192ba9ff8aad0752309a54b633dc75a57c77.camel@tugraz.at> <8e877d2f-01e0-c786-dea5-265edbdc0c07@suse.de> In-Reply-To: From: Jonathan Wakely Date: Wed, 3 Apr 2024 17:56:35 +0100 Message-ID: Subject: Re: Sourceware mitigating and preventing the next xz-backdoor To: Martin Uecker Cc: Michael Matz , Ian Lance Taylor , Paul Koning , Paul Eggert , Sandra Loosemore , Mark Wielaard , overseers@sourceware.org, gcc@gcc.gnu.org, binutils@sourceware.org, gdb@sourceware.org, libc-alpha@sourceware.org Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Wed, 3 Apr 2024 at 15:34, Martin Uecker via Gcc wrote: > I ask a very specific question: To what extend is testing > for features instead of semantic versions and/or supported > standards still necessary? This seems like a problematic approach > that may have been necessary decades ago, but it seems it may be > time to move on. What standard or version should I check for to detect nl_langinfo_l support? It's in POSIX 2017 but macOS supports it in despite not being POSIX 2017 compliant. What about _get_osfhandle? Or fwrite_unlocked? What about whether the platform ABI allows aligning global objects to the cacheline size? Those are just a few of the most recent autoconf checks I've written for libstdc++ in the past few months, not decades ago.