Re: Threat model for GNU Binutils

On 14/04/2023 15:08, Siddhesh Poyarekar wrote:
> There's also a (rare) possibility of an infrequently used instruction 
> having incorrect opcode mapping, resulting in a bug being masked when 
> dumped with objdump or resulting code having undefined behaviour.

The best way to deal with this risk is to run test binaries generated by 
the tools through an independently developed toolchain; something I 
mentioned in the mitigation section.  The chances of a common-mode 
failure leading to the same bug in both sets of tools is very low.

R.