To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to mandos.lsm
- Committer: Teddy Hogeborn
- Date: 2016-08-06 00:53:13 UTC
- mto: (237.7.594 trunk)
- mto: This revision was merged to the branch mainline in revision 350.
- Revision ID: teddy@recompile.se-20160806005313-q9n4b1b7707hnjj4
Makefile: Replace "-fsanitize=address" with "-fsanitize=leak"
The Address Sanitizer is a debugging feature, not a security feature -
it has security issues: <http://seclists.org/oss-sec/2016/q1/363>
Therefore, it should only be used when debugging. Replace it with
"-fsanitize=leak", which is needed since -fsanitize=address no longer
includes it implicitly.
* Makefile (DEBUG): Add "-fsanitize=address".
(ALL_SANITIZE_OPTIONS): Replace "-fsanitize=address" with
"-fsanitize=leak".
The Address Sanitizer is a debugging feature, not a security feature -
it has security issues: <http://seclists.org/oss-sec/2016/q1/363>
Therefore, it should only be used when debugging. Replace it with
"-fsanitize=leak", which is needed since -fsanitize=address no longer
includes it implicitly.
* Makefile (DEBUG): Add "-fsanitize=address".
(ALL_SANITIZE_OPTIONS): Replace "-fsanitize=address" with
"-fsanitize=leak".
- files modified:
- INSTALL
added
removed
mandos.lsm
