220 40417 article Path: news.gmane.org!.POSTED!not-for-mail From: Daniel Gutson Newsgroups: gmane.comp.lang.c++.isocpp.proposals Subject: Re: more security concerns Date: Tue, 9 Oct 2018 09:10:00 -0300 Lines: 110 Approved: news@gmane.org Message-ID: References: Reply-To: std-proposals@isocpp.org NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="0000000000003af18f0577ca9ff6" X-Trace: blaine.gmane.org 1539086897 19989 195.159.176.226 (9 Oct 2018 12:08:17 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Tue, 9 Oct 2018 12:08:17 +0000 (UTC) To: std-proposals Original-X-From: std-proposals+bncBDE3NBMV6UFBBL5V6LOQKGQESQ2XYPY@isocpp.org Tue Oct 09 14:08:13 2018 Return-path: Envelope-to: gclcip-std-proposals@m.gmane.org Original-Received: from mail-lj1-f199.google.com ([209.85.208.199]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1g9qo8-00058W-Tt for gclcip-std-proposals@m.gmane.org; Tue, 09 Oct 2018 14:08:12 +0200 Original-Received: by mail-lj1-f199.google.com with SMTP id r24-v6sf385416ljr.18 for ; Tue, 09 Oct 2018 05:10:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1539087023; cv=pass; d=google.com; s=arc-20160816; b=nTMRer7OcLW9GyFihi5scSFN/MnP+3BiZCGNUOnV8us/KXeFq9uqBM4l+fgIw1uNoC zTsoAeGlFLJ3IsEHnADNTU5w54ucmBvqRMhAKXVKWfNfRsrgkG7KvKZ9/zslbMzuxD1/ KRs1MHOxzOMey5EymrO46EOLkECgfAn9Vuh11UItE+RApd1z0LFJ7BUfF0c1GJfdzP77 ogXOHQEh+nxrrxz48c/FaZRMYdBv2hXCd2pNPFcSRpYIJDJkhNXRZeIJWvevS/eJmhME aKKzjcOYe28lTshvHVKGu34PQ2GhjCzLM8DK6OMwZpAbUf+sHryDI36NzLYW9I7DjCmA zSvg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:to:subject:message-id:date :from:in-reply-to:references:mime-version:dkim-signature; bh=0wdaqZiNpEpN+WfggpELJMSKKCvKQ0r8IOQZ492Ulr8=; b=e9p0kHjBa0I4Etzz5X/gLD4yuXfe6tbUBv+0EZiz0ukkIBtpY6oAs69B0pwlK3WFLQ 5OBqfFxwB8DL1nlAgXmTGFMd/GGM6+Ze56mggxSktYagUAyXcTqCloeBAOCUF8JO+D/y 0oNCCu+YOFyxuHbAaQZi36Aw+NrfIe9fn6NulcSbHHYC+FzO8OjKSQLyKz1duluC/SBi SoHJ/C8YOfffhWqVI78XFxoa+9rJ14uwL8Ceh+gUYAO9GdAbSDozg47tELoL34RnZdYV IY8Zwx/DSj/gOLSdrAohBzXYjsKIviOrSK5D0ssAETjQwwBdengBthk0WcmP7zUP03ls cOsw== ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=rqCEMU7h; spf=pass (google.com: domain of danielgutson@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=danielgutson@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isocpp-org.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :x-original-sender:x-original-authentication-results:reply-to :precedence:mailing-list:list-id:list-post:list-help:list-archive :list-subscribe:list-unsubscribe; bh=0wdaqZiNpEpN+WfggpELJMSKKCvKQ0r8IOQZ492Ulr8=; b=JQ5C4/u9MweegUPxCehvB+3E5DX5ci6czBhhhBtFCKhYGKSYZismtKes8r9RwN8eyL EI2DMAKKfct/LWAoIPf3RlDttxz/pyDtakX+tyljucUPli6+HGXWpQGs/Bb9oNDPae0B qCAGD3sg2dudQ2dPk4nyZ9niOAQgnk225TyQIA8F1ysLv4Eh+1SlU5D5PqbqwyxI4eVA yeIQxV2rI6v9w0Alk7NRyChTH7aVtq3H3H3uYO/EWlM8Mi8L/qMHnq8mfbVoqgus0LRP F9xQFx1Z1XPYsC0mKRocrEIz+pL7YBMIr2zQIiLkzTXb8frY/NH+A5NPPeFDmv/0cNWK jIfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:x-original-sender :x-original-authentication-results:reply-to:precedence:mailing-list :list-id:x-spam-checked-in-group:list-post:list-help:list-archive :list-subscribe:list-unsubscribe; bh=0wdaqZiNpEpN+WfggpELJMSKKCvKQ0r8IOQZ492Ulr8=; b=S8Tdl3jBDZx3BBeDqVVAWAxeLQX/DbXvEZbEjgNc4iZx5cWtWrLQL80VxsqltOYvmb AsVqtnf6D4/cPTUh0/JYC46RwUC6lpBUYgVlT2YINVXzIwMdXSNbbAl7YTZsI8ebkT7D l8wEbiIj1JBd4mkDSXE3cP7GqLrJEa2e9xtYtY0Bz7AgrE26H5CCimoDGDZ6q1m5y+tu GkMvdJRXAgmivKS8kufDAvbx+ujRpztD/TPBYPDj5+RooTdZoS4/CSUJwxQgL5jkeSc/ U/d9MNYSzvukm7fiF/c22mfcfJ4vOfo/2ZALTJZWReiF7aU5P77qjttB1xgNy0FAzihp 2EGA== X-Gm-Message-State: ABuFfojm57QdR6iQIExtuWvSEvnkIfJnZOss9UmUM+v1IgsX0zN7AEbt ntlq917nOkKGaro5+SASaS3GJw== X-Google-Smtp-Source: ACcGV62/pQoMdSnDbGtE3kD9vr3l8AP149t4C8ilFPwcn6fCusaLZkXl9dW/508Bm7o/0hkovGcFDQ== X-Received: by 2002:a19:c201:: with SMTP id l1-v6mr748567lfc.1.1539087023742; Tue, 09 Oct 2018 05:10:23 -0700 (PDT) X-BeenThere: std-proposals@isocpp.org Original-Received: by 2002:a2e:9204:: with SMTP id k4-v6ls182505ljg.31.gmail; Tue, 09 Oct 2018 05:10:22 -0700 (PDT) X-Received: by 2002:a2e:7017:: with SMTP id l23-v6mr17387090ljc.160.1539087022746; Tue, 09 Oct 2018 05:10:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1539087022; cv=none; d=google.com; s=arc-20160816; b=akVH0+qHGAgnVFxc+1q/aZOOPcI2YMqDypcCJ37Ke8sfjtXWnSocU7gtjorteUUps8 NTAzo4AZAByZkTn814Ju5vsJ3VVCP8Tuy/ei+sHCVF21YSRceOPJKmV8N6LnJtxSRBY7 18qcTefGC1qGTPbtWtNNJvN3MwtrGbq0lXVidgZngDPOE1/lIxhQTUU7TdbIfQSykPF7 Dl04lTbhrmWHXJUFp6EoyzN4rCDV2Y5Xp2pNkYFXcauj33Pb0bmJd9/KeUEEghLKm9Y9 0y618lJa6xwfY3hInl+jmEmtRE41LxiZIfcvj0C7xzkE2r5Fjel5oNgEaGGN9/Ix+zos nAeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=Ghevjcf5ULgpMCYtxSLGyoW7I106QZXJHquadQGv7Uk=; b=KQ61eq6ZanqnU8QoArWWLgtT0LbIsdLeqYgMJiEyBqvGQNceqGFz90i0UBrdTxgQBc 4ubmj/Erg6PLGWa+B52ZxZBiTJRHMEFBQlc7De7uV/VdBir+OPxsTLJROawXLzXKc1Jh JLRm/LA2GEe1LDXZEdpB/fMIvcQD309K6pQ90F27SWv3i1kBRxu1hk9gG5eA5Mf7L0fM mdYUoYEJxq8DLX1yYj8/5zrgrWNj9xub2FcpH7zz82YHx0moqcmNQ4bwEVnJBXezU0Ut +MG45OSby23HSCQaWe7wf89fl/0RnFcnXRbdhpl/lPVFIGSJAun9twe3o4OlZIQWTaKO FS1g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=rqCEMU7h; spf=pass (google.com: domain of danielgutson@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=danielgutson@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Original-Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id k5-v6sor3415507ljh.7.2018.10.09.05.10.22 for (Google Transport Security); Tue, 09 Oct 2018 05:10:22 -0700 (PDT) Received-SPF: pass (google.com: domain of danielgutson@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41; X-Received: by 2002:a2e:84a:: with SMTP id g10-v6mr18617027ljd.158.1539087022090; Tue, 09 Oct 2018 05:10:22 -0700 (PDT) In-Reply-To: X-Original-Sender: danielgutson@gmail.com X-Original-Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=rqCEMU7h; spf=pass (google.com: domain of danielgutson@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=danielgutson@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Precedence: list Mailing-list: list std-proposals@isocpp.org; contact std-proposals+owners@isocpp.org List-ID: X-Spam-Checked-In-Group: std-proposals@isocpp.org X-Google-Group-Id: 399137483710 List-Post: , List-Help: , List-Archive: List-Subscribe: , List-Unsubscribe: , Xref: news.gmane.org gmane.comp.lang.c++.isocpp.proposals:40417 Archived-At: --0000000000003af18f0577ca9ff6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable El 28 sept. 2018 8:13, "Daniel Gutson" escribi=C3= =B3: Again, on the DSE related optimizations. After thinking based on some feedbacks (especially from what I understood from Florian) I concluded that the problem is bigger (value taunting) and my attribute-based approach is not enough. Evenmore none of the proposed solutions covers the scenarios. Moreover the exploits have not been described AFAIK. Thanks Florian, Miguel Ojeda and all those provided feedbacks. I will come up with a further explanation and more complete solution in a new thread after more research. I'm at the Ekoparty where I will show a presentation about security vulnerabilities caused by compiler optimizations. The subject is more and more serious (e.g. [1]). I want to propose to allow [[nodiscard]] in individual expressions, such as calls to memset(), std::fill_n, and assignments (DSE happens with both memory and registers). Ideas? Co-authors? --=20 Who=E2=80=99s got the sweetest disposition? One guess, that=E2=80=99s who? Who=E2=80=99d never, ever start an argument? Who never shows a bit of temperament? Who's never wrong but always right? Who'd never dream of starting a fight? Who get stuck with all the bad luck? --=20 You received this message because you are subscribed to the Google Groups "= ISO C++ Standard - Future Proposals" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to std-proposals+unsubscribe@isocpp.org. To post to this group, send email to std-proposals@isocpp.org. To view this discussion on the web visit https://groups.google.com/a/isocpp= ..org/d/msgid/std-proposals/CAFdMc-2UXSNGCYophb_mVhMTJBjHCWDxFekpXDY7HGY1upc= 4bw%40mail.gmail.com. --0000000000003af18f0577ca9ff6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

El 28 sept. 2018 8:13, "Daniel Gutson" &= lt;danielgutson@gmail.com> escribi=C3=B3:
Again, on = the DSE related optimizations.

After thinking based on some feedbacks (esp= ecially from what I understood from Florian) I concluded that the problem i= s bigger (value taunting) and my attribute-based approach is not enough.=C2= =A0
Evenmore none of the proposed solutions covers t= he scenarios. Moreover the exploits have not been described AFAIK.=C2=A0=C2= =A0

Thanks Florian, Migu= el Ojeda and all those provided feedbacks.

I will come up with a further explanation and more compl= ete solution in a new thread after more research.

<= div dir=3D"ltr">

I'm at the Ekoparty where I will sh= ow a presentation about security vulnerabilities caused by compiler optimiz= ations. The subject is more and more serious (e.g. [1]).

I want to propose to allow [[nodiscard]] in individual expressions, = such as calls to memset(), std::fill_n, and assignments (DSE happens with b= oth memory and registers).

Ideas? Co-authors?=C2= =A0


--
Who=E2=80= =99s got the sweetest disposition?
One guess, that=E2=80=99s who?
Who= =E2=80=99d never, ever start an argument?
Who never shows a bit of tempe= rament?
Who's never wrong but always right?
Who'd never dream= of starting a fight?
Who get stuck with all the bad luck?
<= /div>

--
You received this message because you are subscribed to the Google Groups &= quot;ISO C++ Standard - Future Proposals" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to std-proposa= ls+unsubscribe@isocpp.org.
To post to this group, send email to std-proposals@isocpp.org.
To view this discussion on the web visit htt= ps://groups.google.com/a/isocpp.org/d/msgid/std-proposals/CAFdMc-2UXSNGCYop= hb_mVhMTJBjHCWDxFekpXDY7HGY1upc4bw%40mail.gmail.com.
--0000000000003af18f0577ca9ff6-- .