From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id wb0xCpnlzGomzDoAWB0awg (envelope-from ) for ; Mon, 12 Oct 2026 09:50:17 -0400 Authentication-Results: simark.ca; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=WLCo21eb; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id 1D9991E051; Mon, 12 Oct 2026 09:50:17 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED autolearn=ham autolearn_force=no version=4.0.1 Received: from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 671821E04E for ; Mon, 12 Oct 2026 09:50:16 -0400 (EDT) Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 95CE44BA23C7 for ; Mon, 12 Oct 2026 13:50:15 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 95CE44BA23C7 Authentication-Results: sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=WLCo21eb Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by sourceware.org (Postfix) with ESMTP id CAF834BA23E3 for ; Mon, 12 Oct 2026 13:49:33 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org CAF834BA23E3 Authentication-Results: sourceware.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org CAF834BA23E3 Authentication-Results: sourceware.org; arc=none smtp.remote-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791812973; cv=none; b=Kai2dqMjWtOqKDeXko/HWwa93T8pJKQB4eRQptc1HBZbW73NAjnIzfKyXJt/h5CA/nnXBoQ6xQdT/rDrDpS8leizT+vm7l8QGT60xe7hx0tFWPnu6kyghuFzZfsTzzDXKAiVpNsq3hW7T+vyOx4RRqtRtVYc+VBNKIuuy/8rIBc= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791812973; c=relaxed/simple; bh=KTOzfisL/YuQZIhdsm4cwR/r9q7tElHzrUb6i8tOjvs=; h=DKIM-Signature:From:To:Subject:Date:Message-Id:MIME-Version; b=DQD7P7rSanFyC4GqETlHVAD1HCoe3y38pajkLrOJKkW26kb6cbXb0Qq29ofkdwbKDpZjekAC5thz8tDyd8KcPP6hJMfaa+WM7iqxVWYmzujOpDDEQT/uWbFdQZYdgQFcA2C545AASc7w5HE3vagrOykLrPUVnMXi6X6VPdEtPUs= ARC-Authentication-Results: i=1; sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=WLCo21eb DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org CAF834BA23E3 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1791812973; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=STKuQlCqai3zitsaYUrsSv9N2f9WAbtX9lck0D28RFI=; b=WLCo21eb/xgQ3GTREfBLjj4pF26LD48inSM+yGp7jx/sFlRnlxU3VJ70yXIMebO3YCxURc AQAvSNj8KQS7IEfQhBFj22WcqNpHZAM+mX+dzhTWxxwriL3cVt43Ek5CnBbmhI8JYEW6+A C43ggDAl24I7JzZgbDOjQ1xNZAUIm6s= Received: from mail-wr1-f70.google.com (mail-wr1-f70.google.com [209.85.221.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-668-UVecET3RMumZbJ0bNWwdqQ-1; Mon, 12 Oct 2026 13:49:31 +0000 X-MC-Unique: UVecET3RMumZbJ0bNWwdqQ-1 X-Mimecast-MFC-AGG-ID: UVecET3RMumZbJ0bNWwdqQ_1791812970 Received: by mail-wr1-f70.google.com with SMTP id ffacd0b85a97d-48aef5cfe43so1127960f8f.1 for ; Mon, 12 Oct 2026 06:49:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791812970; x=1792417770; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=STKuQlCqai3zitsaYUrsSv9N2f9WAbtX9lck0D28RFI=; b=xiqy+FgF6RpYcpaMaNlMYGenmQ8cGX62pvhue0uq0SfjiGJuihjCBXdcxQ6g6EYTx5 K31cp2QTURZ5GH+l66o0Jt/SNk+SyeqIcxy1GyvNGd3NJQd9vcMUF6nF9lXkLuCoK4Jp GLrBsNLuJamUBcYWHSzfLvB0muVezZOVzXzRpT8fonR2GQO+UR4PdROC0hHP+YvU/wFC EvMrxc3LcUYR70RHA1f9Y+YxzXJgwBLbBy6u/b9BljPMDie1tgEdgi/JbYT+bdNS+k6y G6M2yVNgtDqQqJydXZ/qnQsA0PVbAV4Ahr3oLe3RD56Ua5qdzt8iiY+hB2xWLyC5t3yC 5mag== X-Gm-Message-State: AFq9FYLZ6a9HXD2JijG/cuC1MUNgzvb2LBN8U6FCeXcvVDr5iEfasJMp X4DP08Bm1Ug2T3CgLcKY2a+dTYoRwE+6oFXZplQBSOnXz67Ccs+vvgA047v1K5iF9dBei2EZIqv LuOcd7/20lmq9khwOHrUDtg909jNY4Xv6WcuEdS3jdfudN6P2kMUd4zdM57qVbNYoub4wdXD6gr Wc3J/DIOKPNXxME21VYUjiehs/dOco4I5bOH5vNl7879Fk8GM= X-Gm-Gg: AYBFou0EES9ljm5p6urFNx1hNBnvCkIllJEqNMesylfuxr94hTaqdSn+/nRy2w3mXDh IeI5DNU+WvAYIoEjJvsxTzFa/D9shdBGbCwllwcNcODEz8tQM7WIEaQI77/2GNSh3PzBd1Rhgsp S3xHx/w4iyCoihXMqNjGJy7Wk7zM+Ii1R48Grs3QU1THlBPIXzKcCKNQO6TJbOfo9zfzwQ3OJpy PBWIKTiB7omCLstKEiwdNDvEZKl7+hjD88jCZLQMy8CUgtG+JAvLfJoJbt3CNMCpBCCrhUjD0RQ 5+OOHseG/LUHsJtS5NeiH8uWqcvkgTmy9No6B7v7WlSq1Hp/qTmKjiZZJUlXzB9TBg9M0Q== X-Received: by 2002:a05:600c:3e8f:b0:4a0:1c0e:b057 with SMTP id 5b1f17b1804b1-4a18e44653cmr188480825e9.4.1791812969990; Mon, 12 Oct 2026 06:49:29 -0700 (PDT) X-Received: by 2002:a05:600c:3e8f:b0:4a0:1c0e:b057 with SMTP id 5b1f17b1804b1-4a18e44653cmr188479955e9.4.1791812969172; Mon, 12 Oct 2026 06:49:29 -0700 (PDT) Received: from localhost ([213.31.44.29]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48db9abda3csm20924040f8f.36.2026.10.12.06.49.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Oct 2026 06:49:28 -0700 (PDT) From: Andrew Burgess To: gdb-patches@sourceware.org Cc: Siddhesh Poyarekar , Andrew Burgess Subject: [PATCH 5/5] gdb: improve SECURITY.txt relating to embedded language bugs Date: Mon, 12 Oct 2026 14:49:14 +0100 Message-Id: <03796575f2fe79eb6f595a8a4fcd1548be12ea85.1791812758.git.aburgess@redhat.com> X-Mailer: git-send-email 2.25.4 In-Reply-To: References: MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: W53BQ_0P2N5J-xNG7mprMTFOzcqmJF0xddAkP3KWxl8_1791812970 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: 8bit content-type: text/plain; charset="US-ASCII"; x-default=true X-BeenThere: gdb-patches@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb-patches mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: gdb-patches-bounces~public-inbox=simark.ca@sourceware.org The SECURITY.txt document has some text about how GDB provides access to Python, Guile, and Shell interpreters, and how security bugs are only a GDB security bug if the bug is specifically caused by GDB's implementation, rather than being a consequence of having access to these languages. However, the existing language was maybe not as clear as it could be. Currently we say: "...and the effect can only be reproduced when executed in the GDB environment." I think it is clearer if we instead say: "...and the effect is caused by a bug in GDB's implementation rather than being an inherent consequence of the executed code, or being a bug in the underlying language." This tries to split the problem space into 3 cases: (1) A bug in the underlying language is not a GDB bug. (2) That GDB allows you to run harmful code via the extension languages is not a GDB bug. (3) A bug that only exists because of a bug in GDB's implementation of the extension languages is a GDB bug. --- gdb/SECURITY.txt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/gdb/SECURITY.txt b/gdb/SECURITY.txt index b484a1f65a1..f4bcc656406 100644 --- a/gdb/SECURITY.txt +++ b/gdb/SECURITY.txt @@ -122,9 +122,10 @@ What Is Not A Security Bug GDB provides 3 different turing complete languages, Guile, Python and direct access to the shell. Making use of these languages can have unknown effects, including outside of the GDB process. Such - effects will only be considered security bugs if they fit some of the - definitions in this document and the effect can only be reproduced - when executed in the GDB environment. + effects will only be considered security bugs if they fit some of + the definitions in this document and the effect is caused by a bug + in GDB's implementation rather than being an inherent consequence of + the executed code, or being a bug in the underlying language. Any issues that arise from running an untrusted program outside of a secure environment are not security bugs in GDB. Any issues that -- 2.25.4