From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id 8WX1MZflzGomzDoAWB0awg (envelope-from ) for ; Mon, 12 Oct 2026 09:50:15 -0400 Authentication-Results: simark.ca; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=Jhpt3OLh; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id C78981E051; Mon, 12 Oct 2026 09:50:15 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED autolearn=ham autolearn_force=no version=4.0.1 Received: from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 411471E04E for ; Mon, 12 Oct 2026 09:50:15 -0400 (EDT) Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 0BD7A4BA23CD for ; Mon, 12 Oct 2026 13:50:08 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 0BD7A4BA23CD Authentication-Results: sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=Jhpt3OLh Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTP id 8E8CE4BA23F8 for ; Mon, 12 Oct 2026 13:49:30 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 8E8CE4BA23F8 Authentication-Results: sourceware.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 8E8CE4BA23F8 Authentication-Results: sourceware.org; arc=none smtp.remote-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791812970; cv=none; b=B4MfZdFJ6wPMFXkuHTF15xQ1NdJqpxls5l+EWWzERBMueDaNo3r/xJMirKpe8P2xoimmkIQHgZYC4YagvuARyCEWB4QsosjuoR10sUFOtAWnoHBPx4MvRmZJIv1E19r7x4nlzB5Sd8qeXXPGBlup+9DC0DI4WMCpxrC0P+5+U4E= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791812970; c=relaxed/simple; bh=/rQzRTnO1903bwJWznO0Jh+shMXLefDge+ZPagmydlI=; h=DKIM-Signature:From:To:Subject:Date:Message-Id:MIME-Version; b=EDReUbSrNd5lNI1mwMkcIe3XcN8ynDb8xM8wvYqTiHJ2UlAq6vHaLEX8QTtU4xZaWiMPLKbsCnUSiMWM2hx65E6vIDUjbKzokpU9JG89yKTFzHvH6MIcRbKaz3xham0ThfO7pd2wXhdIv/Y2TZ+GKunBLj7VUJRtvRHtkvrSWk4= ARC-Authentication-Results: i=1; sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=Jhpt3OLh DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 8E8CE4BA23F8 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1791812970; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Gl4insG5dLURdJhfWJE4MEtPPNyfz+zasLMfOQxBu40=; b=Jhpt3OLhjWCcCLykyPaFiy7RMJChjQpWMR4ukttuIKVnwWqj5sUmT63Di5K0nGuJVpHrOD h4SuAHDH8zdyF2K+cCng/Rhjv5BqpQQZ+diuYL/W0gZtifigVfIfpe2ia9YPN9eL9LRpRq 2z6tIVNnO6+obefFWnSlb70fTyt8HV8= Received: from mail-wr1-f71.google.com (mail-wr1-f71.google.com [209.85.221.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-633-zDdHVX4qPmWBtBxAcqaa2w-1; Mon, 12 Oct 2026 13:49:26 +0000 X-MC-Unique: zDdHVX4qPmWBtBxAcqaa2w-1 X-Mimecast-MFC-AGG-ID: zDdHVX4qPmWBtBxAcqaa2w_1791812965 Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-48c415561aaso1151099f8f.1 for ; Mon, 12 Oct 2026 06:49:25 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791812965; x=1792417765; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Gl4insG5dLURdJhfWJE4MEtPPNyfz+zasLMfOQxBu40=; b=1AJIubKLAg0zTdGJfHQDEguSLx2HEijI2UGsKKRJgJ5EDqsS0EH09dcclWL6Hbv/QY fQcKS/FO/a9JIVZOCAVlGdv8zwH92vXrLTkAdujh/zDJZL69llN3KMX/9HyKqkkBoVGZ GMyATRxXZLSt/akRMVLbvkkCFNz36X5jeMhTep+HtBT0smbRvUON5+gpAw6lXdqUz4JK UkPcXQFfq5kM1j5y3HTzE+0ZfADqQI96XhfWaqCSt/UCS2fq3IWxo8tC0sTSVpno22Jg NT0zkEr6GA6+/E27b6ot64qiH3JDKScwuW+SK6OW1vmLfYmREACJisKqD1u3YwK8XjdK LodQ== X-Gm-Message-State: AFq9FYLEE95AoVxWPG76Guh5UO8NuN9nKq/oIREKHQbFsLw6Rg2+o3mk XWmuH8q5bO0w1+dlNiN8VbpO8DsMN9iR/mwIsUXnWp6caGACEculYE+pWnaK0LNuI0NowUazoLH wi2tG5aVw8HlWHTHu02X9jblWlMGE0TkVxHZCYz5WaBSgMO9weHz4OTQA/M1e2ZzCyVcV972HN9 nKC2ObBc0QlBMBk2rA7PssOtcIYObrRB339Fw+qI/GOqnsJXQ= X-Gm-Gg: AYBFou3eU4/YKmm+tJT2UhEPB7/vY9vQoSUx+5wCkgh2hI1giWX+OdZo3ztnCcAAd5F XDrZ3cYkc68QMAwohUwWsC8CXiKXSpiGxxenJisSNNit5i8sr8NwdoeZV7oZxw9apH44muf1Ny5 sD6LylZe96Ni2mLaU63Um7BhugeBU1BXkBWAe9HtgzweR+LLtIj8HEHjSCaBi8ix4l4607nwIm5 8JtqEvcUKTDrSc5EEKMU/V2CnM3tG6Gw/emUY0EJpFC4fDIZvdBvasBTl/Mc6ak1Os4z4GXzvWE xhoJlqlG1X8LDQznK5Yc53GTRg0drCHgJ0FYAmh2CFhA8bKm3UE2lK9sZdOf8nRiAsw+ X-Received: by 2002:a5d:6f1a:0:b0:48d:bafc:a409 with SMTP id ffacd0b85a97d-48dbafca71dmr18204711f8f.26.1791812964626; Mon, 12 Oct 2026 06:49:24 -0700 (PDT) X-Received: by 2002:a5d:6f1a:0:b0:48d:bafc:a409 with SMTP id ffacd0b85a97d-48dbafca71dmr18204636f8f.26.1791812964036; Mon, 12 Oct 2026 06:49:24 -0700 (PDT) Received: from localhost ([213.31.44.29]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48db9463a9dsm20233159f8f.6.2026.10.12.06.49.22 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Oct 2026 06:49:23 -0700 (PDT) From: Andrew Burgess To: gdb-patches@sourceware.org Cc: Siddhesh Poyarekar , Andrew Burgess Subject: [PATCH 2/5] gdb: extend SECURITY.txt to highlight additional remote debugging risks Date: Mon, 12 Oct 2026 14:49:11 +0100 Message-Id: <4a6d4fbc0037fcff1e4e5efc940aab03eb9e57f8.1791812758.git.aburgess@redhat.com> X-Mailer: git-send-email 2.25.4 In-Reply-To: References: MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: HRTshaZS2npZutKJRRFjKlqlxwUiSmb_8oTc3LxsqvI_1791812965 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: 8bit content-type: text/plain; charset="US-ASCII"; x-default=true X-BeenThere: gdb-patches@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb-patches mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: gdb-patches-bounces~public-inbox=simark.ca@sourceware.org I had cause to re-read the SECURITY.txt document recently, and I felt that it wasn't really clear on one aspect of using GDB with gdbserver (or any remote target). I felt that the text wasn't explicit enough about how a remote target can download executables and libraries to GDB, and how GDB can then parse these files. When we consider the sort of bugs we see, especially in BFD and the DWARF parser, when it comes to badly formatted files, I thought it was worth calling this out. --- gdb/SECURITY.txt | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/gdb/SECURITY.txt b/gdb/SECURITY.txt index f4ddebe3f03..63e110055db 100644 --- a/gdb/SECURITY.txt +++ b/gdb/SECURITY.txt @@ -210,6 +210,18 @@ Security Realities Of The GDB Project user to protect this connection, for example, by only starting gdbserver within a secure network. + Additionally, when GDB connects to a remote target, it will, by + default, automatically download the executable and shared libraries + from the remote system and parse them locally, without prompting the + user. This means that the risks described above relating to parsing + malformed executables also apply when performing remote debugging. + If the remote target is untrusted, or the connection to the remote + target is untrusted, malicious or malformed binaries could be served + to GDB, resulting in any of the issues described above. Users + should apply the same precautions when performing remote debugging + as when analysing an untrusted binary locally, including running GDB + in a secure, sandboxed environment. + Reporting Non-Security Bugs --------------------------- -- 2.25.4