|
From: | Richard Stallman |
Subject: | Re: GCC reporting piped input as a security feature (was: GNU Coding Standards, automake, and the recent xz-utils backdoor) |
Date: | Mon, 08 Apr 2024 18:29:46 -0400 |
[[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > To avoid false positives if this test is used, we might want to add a > rule to the GNU Coding Standards (probably in the "Makefile Conventions" > section) that code generated with other utilities MUST always be > materialized in the filesystem and MUST NOT be piped into the compiler. That sounds like a good idea. I expect this will not interfere with anything useful. What do others thing of this question? -- Dr Richard Stallman (https://stallman.org) Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)
[Prev in Thread] | Current Thread | [Next in Thread] |