gcc version 4.8.2 in slack 14.1
Iain M Conochie <[email protected]>
| Newsgroups | gmane.linux.slackware |
|---|---|
| Message-ID | <[email protected]> |
Hello all, I have just been bitten by the new version of gcc as shipped in slackware 14.1. I was setting up a new development box, and when compiling ldap support for nss (nss_ldap), when trying to login with a user whose details are stored in the ldap directory, the nss_ldap module would segfault. This also happened when adding the kerberos packages from the excellent slackbuilds site. Now, since this is slack, I went back to a 14.0 dev machine, and compiled the packages on that, installed them on the 14.1 machine, and the run fine. The main difference I have found between the 2 machines is the compiler version; 4.7.1 on 14.0 and 4.8.2 on 14.1. Now I have not extensively tested this, but I think this may be due to new optimizations in gcc. I have read on some blogs online, that C code using undefined behavior are having the checks removed, e.g. http://www.itworld.com/security/380406/how-your-compiler-may-be-compromising-application-security Has anyone else seen this kind of thing? What worries me the most is these were security packages (e.g. openssh, MIT kerberos) and there may be nasty hidden bugs in these code bases waiting to pounce! Cheers Iain