gcc version 4.8.2 in slack 14.1

Iain M Conochie <[email protected]>
Newsgroups gmane.linux.slackware
Message-ID <[email protected]>
Hello all,

   I have just been bitten by the new version of gcc as shipped in 
slackware 14.1. I was setting up a new development box, and when 
compiling ldap support for nss (nss_ldap), when trying to login with a 
user whose details are stored in the ldap directory, the nss_ldap module 
would segfault. This also happened when adding the kerberos packages 
from the excellent slackbuilds site.

   Now, since this is slack, I went back to a 14.0 dev machine, and 
compiled the packages on that, installed them on the 14.1 machine, and 
the run fine. The main difference I have found between the 2 machines is 
the compiler version; 4.7.1 on 14.0 and 4.8.2 on 14.1.

   Now I have not extensively tested this, but I think this may be due 
to new optimizations in gcc. I have read on some blogs online, that C 
code using undefined behavior are having the checks removed, e.g.

http://www.itworld.com/security/380406/how-your-compiler-may-be-compromising-application-security

   Has anyone else seen this kind of thing? What worries me the most is 
these were security packages (e.g. openssh, MIT kerberos) and there may 
be nasty hidden bugs in these code bases waiting to pounce!

Cheers

Iain
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.