GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows • Hacker News Board

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#21

Post by ryanmerket » Wed, Apr 03, 2024, 4:49 PM UTC

+1 for ASCII art

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#22

Post by consp » Wed, Apr 03, 2024, 4:52 PM UTC

_ache_ wrote: post #17

Need the `-Wanalyzer-out-of-bounds` option and it's only static. At compile time so. It can catch easy one, not the obscures cases.

Nice to have though and probably saves my forehead a lot of facepalms.

Edit: I also like the lib*san way of showing the variables and where everything is and is written to when you do oob writes but that is a whole other way of getting to it.

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#23

Post by jeffbee » Wed, Apr 03, 2024, 4:53 PM UTC

What would be even better is if their analysis worked. Wstringop-overflow and related features have been broken since GCC 10, for five years, and remain broken. The last time range analysis actually worked well enough to be enabled was GCC 9. Projects of realistic complexity need to run with evrp-mode=legacy, or just do what almost everyone did or wants to do: switch to clang.

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#24

Post by karmakaze » Wed, Apr 03, 2024, 4:54 PM UTC

casenmgreen wrote: post #20

[flagged]

I got a huge Premium opt-in box (on mobile) with a large button labelled "Disable" and small text to 'continue without'. I'm guessing Disable is to disable this box and subscribe to Premium so I clicked the small text not the large green Disable button.

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#25

Post by odiroot » Wed, Apr 03, 2024, 4:55 PM UTC

casenmgreen wrote: post #20

[flagged]

So, do tell, are you a human?

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#26

Post by kingforaday » Wed, Apr 03, 2024, 4:57 PM UTC

odiroot wrote: post #25

casenmgreen wrote: post #20

[flagged]

So, do tell, are you a human?

What would Alan Turing do?

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#27

Post by ipython » Wed, Apr 03, 2024, 4:59 PM UTC

casenmgreen wrote: post #20

[flagged]

Just skip the useless phoronix article and go direct to the source: https://developers.redhat.com/articles/2024/04/03/improvemen....

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#28

Post by therealfiona » Wed, Apr 03, 2024, 4:59 PM UTC

casenmgreen wrote: post #20

[flagged]

Glad to see these human checks are working. Wouldn't want any bots reading Phoronix, lookin at pictures.

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#29

Post by omoikane » Wed, Apr 03, 2024, 5:00 PM UTC

This highlights just one of the many features, the linked site has more and is being discussed here:

https://news.ycombinator.com/item?id=39917509 - Improvements to static analysis in GCC 14 (redhat.com)

Re: GCC 14 Boasts Nice ASCII Art for Visualizing Buffer Overflows

#30

Post by eric__cartman » Wed, Apr 03, 2024, 5:01 PM UTC

chongli wrote: post #13

This is incredible and would make for an excellent teaching tool! For students it’s generally not helpful just to crash with “invalid access.” They need to be shown where the overflow occurred and ideally what reads/writes caused it.

I wish I had this all those times I had to guess what buffer exploded just by looking at the Valgrind output signaling invalid reads/writes.