[27938] in bugtraq
GNU GCC: Optimizer Removes Code Necessary for Security
daemon@ATHENA.MIT.EDU (Joseph Wagner)
Tue Nov 19 15:06:59 2002
Date: 16 Nov 2002 10:04:44 -0000
Message-ID: <20021116100444.7957.qmail@mail.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Joseph Wagner <wagnerjd@prodigy.net>
To: bugtraq@securityfocus.com
When optimizing code for "dead store removal" the optimizing compiler may
remove code necessary for security.
A programmer could erroneously think that his code is secure, even though
the securing code is removed from the compiled code.
For a full report, including a complete description of the bug, steps
necessary to reproduce the problem, a workaround, and sample code, go to:
http://gcc.gnu.org/cgi-bin/gnatsweb.pl?cmd=view%20audit-
trail&database=gcc&pr=8537
