From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id y5rIF/+az2qhcwkAWB0awg (envelope-from ) for ; Wed, 14 Oct 2026 11:08:47 -0400 Authentication-Results: simark.ca; dkim=fail reason="signature verification failed" (768-bit key; unprotected) header.d=tromey.com header.i=@tromey.com header.a=rsa-sha256 header.s=default header.b=Atv2B7SA; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id 498101E04E; Wed, 14 Oct 2026 11:08:47 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-3.8 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIM_INVALID,DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_DNSWL_MED autolearn=ham autolearn_force=no version=4.0.1 Received: from vm01.sourceware.org (vm01.sourceware.org [IPv6:2620:52:6:3111::32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 95A761E04E for ; Wed, 14 Oct 2026 11:08:46 -0400 (EDT) Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 23CB74BA2E1F for ; Wed, 14 Oct 2026 15:08:45 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 23CB74BA2E1F Authentication-Results: sourceware.org; dkim=fail reason="signature verification failed" (768-bit key, unprotected) header.d=tromey.com header.i=@tromey.com header.a=rsa-sha256 header.s=default header.b=Atv2B7SA Received: from omta34.uswest2.a.cloudfilter.net (omta34.uswest2.a.cloudfilter.net [35.89.44.33]) by sourceware.org (Postfix) with ESMTPS id 3CB4C4BA2E0F for ; Wed, 14 Oct 2026 15:08:16 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 3CB4C4BA2E0F Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=tromey.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=tromey.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 3CB4C4BA2E0F Authentication-Results: sourceware.org; arc=none smtp.remote-ip=35.89.44.33 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791990496; cv=none; b=ozZvAwu5NvaPS46wWNH36VWcpULszHZd19H2Guta40dr1bxoRislfvvLdb9g1bXC9GqwVFOesVKGk6aDChujY7Y329qaE3Bm4fvfXTmpgmtROdYwuWS/YPyT57ul4Nzi+aQQeznvtoaetVeY5QeXvSQysczMv/miBgDcmNucLLw= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791990496; c=relaxed/simple; bh=9vuDHq8f/wIXjczHLGr/Q86TyvRF1IvqGLFxhUgxNXs=; h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version; b=aJXMIUTab6N0lhREfIM7+Q0i1giE1ZGKlQ5pVJSxYUMDlwa4Eo0aioRiro7vG1VDvdhqX+BhaAHipCPuoDaRLsiuwY4hJDJjEmS5JPHH+Kljt2zhtgJd/1lT5ULjlNP/FxCQXY3RDzbFdVmp2ENwZw7FuKxfeZLgMZ3vGqoiIDE= ARC-Authentication-Results: i=1; sourceware.org; dkim=policy (768-bit key, unprotected) header.d=tromey.com header.i=@tromey.com header.a=rsa-sha256 header.s=default header.b=Atv2B7SA reason="signing key too small" DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 3CB4C4BA2E0F Received: from eig-obgw-5007b.ext.cloudfilter.net ([10.0.29.167]) by cmsmtp with ESMTPS id GsvhxxtkSaC0UH0aVxxzpm; Wed, 14 Oct 2026 15:08:15 +0000 Received: from box5379.bluehost.com ([162.241.216.53]) by cmsmtp with ESMTPS id H0aUx8J8egNihH0aUxKQTu; Wed, 14 Oct 2026 15:08:14 +0000 X-Authority-Analysis: v=2.4 cv=G78cE8k5 c=1 sm=1 tr=0 ts=6acf9ade a=ApxJNpeYhEAb1aAlGBBbmA==:117 a=ApxJNpeYhEAb1aAlGBBbmA==:17 a=660iZSQnnn4A:10 a=ItBw4LHWJt0A:10 a=-AhOJeyIhiBdY5jxf7IA:9 a=DCx65vhANUyCzuf5D8fC:22 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tromey.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date:References:In-Reply-To :Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post: List-Subscribe:List-Post:List-Owner:List-Archive; bh=DG4SYIWqU5FcXJShAtYTPnlBtOgZj+RYkKdmH9c/wVE=; b=Atv2B7SAfpIAjVPatzi5lK26KP Rcjo6D3WyKzEo+6g+njPjywtQjsh+jTd198cwJNXoFhuKOVCFJ/HaUYzyAMjpkz+wAHVQmBacMZiu dOi5HNuqYsP1SOrAWKjr7XK0d; Received: from 97-122-110-129.hlrn.qwest.net ([97.122.110.129]:46198 helo=bapiya) by box5379.bluehost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.100.1) (envelope-from ) id 1xH0aT-00000001HxH-3GuB; Wed, 14 Oct 2026 09:08:13 -0600 From: Tom Tromey To: Siddhesh Poyarekar Cc: Andrew Burgess , gdb-patches@sourceware.org Subject: Re: [PATCH 2/5] gdb: extend SECURITY.txt to highlight additional remote debugging risks In-Reply-To: (Siddhesh Poyarekar's message of "Tue, 13 Oct 2026 11:22:37 -0400") References: <4a6d4fbc0037fcff1e4e5efc940aab03eb9e57f8.1791812758.git.aburgess@redhat.com> X-Attribution: Tom Date: Wed, 14 Oct 2026 09:08:12 -0600 Message-ID: <87jynk48wz.fsf@tromey.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box5379.bluehost.com X-AntiAbuse: Original Domain - sourceware.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - tromey.com X-BWhitelist: no X-Source-IP: 97.122.110.129 X-Source-L: No X-Exim-ID: 1xH0aT-00000001HxH-3GuB X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: 97-122-110-129.hlrn.qwest.net (bapiya) [97.122.110.129]:46198 X-Source-Auth: tom+tromey.com X-Email-Count: 6 X-Org: HG=bhshared;ORG=bluehost; X-Source-Cap: ZWx5bnJvYmk7ZWx5bnJvYmk7Ym94NTM3OS5ibHVlaG9zdC5jb20= X-Local-Domain: yes X-CMAE-Envelope: MS4xfE9krnBCwDy0R0DuJFwXxvl/ivQyT2hIbRGWamndzM+rFgEAPcZjZBEGaL+cS/Ze+KVOX1SS+wieHgYrqodjytidEgfaeakKxMqxcHTH872s+dsM4G2j rR2ulS5yL5lB+L8GOyo9htuvhJu2eeZA92dkWVv+uppqc0pJ59iOGlUn5cvnJ5hgg8nL1ErbSZVIBFTroeQoz6JXtwJWUJkabE4= X-BeenThere: gdb-patches@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb-patches mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: gdb-patches-bounces~public-inbox=simark.ca@sourceware.org >> + Additionally, when GDB connects to a remote target, it will, by >> + default, automatically download the executable and shared libraries >> + from the remote system and parse them locally, without prompting the >> + user. This means that the risks described above relating to parsing >> + malformed executables also apply when performing remote debugging. >> + If the remote target is untrusted, or the connection to the remote >> + target is untrusted, malicious or malformed binaries could be served > This is a good guideline, but does not make clear if bugs in this > processing will be treated as security issues. This is true for the > line above as well, which this paragraph intends to augment - it warns > the user that such behaviour is not good, but does not make a > definitive statement whether bugs related to them will be treated as > security issues or not. I think it's relatively clear given these paragraphs: GDB is not meant to be offered as a service (that is, offered over an insecure connection to non-local users), and so denial of service attacks targeting GDB itself, or other bugs that target this use case, are not considered a security bug. ... Any issues that arise from running an untrusted program outside of a secure environment are not security bugs in GDB. Any issues that arise from running an untrusted program through GDB inside a secure environment are only security bugs if GDB is required in order to trigger the issue. Tom