From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id q/tGGeBMzmrojAIAWB0awg (envelope-from ) for ; Tue, 13 Oct 2026 11:23:12 -0400 Authentication-Results: simark.ca; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=HOLUHHJq; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id 509861E04E; Tue, 13 Oct 2026 11:23:12 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham autolearn_force=no version=4.0.1 Received: from vm01.sourceware.org (vm01.sourceware.org [IPv6:2620:52:6:3111::32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 8BB1C1E04E for ; Tue, 13 Oct 2026 11:23:11 -0400 (EDT) Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 95F404BA7981 for ; Tue, 13 Oct 2026 15:23:10 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 95F404BA7981 Authentication-Results: sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=HOLUHHJq Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTP id C544C4BA2E3D for ; Tue, 13 Oct 2026 15:22:44 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org C544C4BA2E3D Authentication-Results: sourceware.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org C544C4BA2E3D Authentication-Results: sourceware.org; arc=none smtp.remote-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791904964; cv=none; b=bM+Djl+731pPM37Vdm2ANLchUNJrfivEjCp7ytkdiO5kZPl49qJNnCw1T8Q36DkI4zbEaHfralpk+wVsMxX0f0ikLUb7+DBJtFtfcntS6KOXfrGKhx4/BSsfdPTNXWBoqwAH++qurZe4YLP2vE5FtUYYNsJCZ9dRIfEtHljQlkE= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1791904964; c=relaxed/simple; bh=VxmBi2BWbUlkqXdNz+uNZqn70sm+TXIb2B+eOumh7zI=; h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From; b=KmAG4KfBWfyiixJ2YNQ+wQUxLjYDC9CHZBocBQm+B3NE5wgrkjpmevpQZYAhrg+7bN7Uh5urbZ2nPgrlmyl4f6DQnLPD8InewFUD0nAUL6B9/qB2eFQNyToUtzpu3QsJt8y56DJIHXI8fKsea/GgXYV5uEUiK1WpkXau1W6hC0s= ARC-Authentication-Results: i=1; sourceware.org; dkim=pass (1024-bit key, unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=HOLUHHJq DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C544C4BA2E3D DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1791904964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=RvuySzc8vfQv+V9SGzJjkUe46RUbVkKzkwk3kVz6JAg=; b=HOLUHHJqiJgS1z6ZxrX3mZ2DVRFZUTz8fUjTTdzpODbm77UMCqOP73HOtu5NKjDb3NkylB AHO9GBkj3Gb33B97gK4u3cdPaXQAtlagFJnTLnUSseogYzHfgUtYgRBGjV+yvA0q+t6+uU FaSjWqX8YNUT7a9FW2ZdwY7O6xKNijE= Received: from mail-qk1-f198.google.com (mail-qk1-f198.google.com [209.85.222.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-621-VOAAJ125MCea4Jpn-jpMgA-1; Tue, 13 Oct 2026 15:22:43 +0000 X-MC-Unique: VOAAJ125MCea4Jpn-jpMgA-1 X-Mimecast-MFC-AGG-ID: VOAAJ125MCea4Jpn-jpMgA_1791904962 Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-93be1861d2dso473194485a.3 for ; Tue, 13 Oct 2026 08:22:43 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791904962; x=1792509762; h=content-transfer-encoding:content-type:in-reply-to:from :content-language:references:to:subject:user-agent:mime-version:date :message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=RvuySzc8vfQv+V9SGzJjkUe46RUbVkKzkwk3kVz6JAg=; b=ISz8iHnDSoFoYQ7XPltdC9hz0rG/H45CRe0TydM/e7mVLje1lSHiT3mUDEwkoznqR3 MOI2bT+nP7Fne7n6bjlvkRedUZGhAyzHalNiN4M/Pv3FkD8QOWI9vac2W3grmNju5+0F tuRVtKCH2mR+OG/ZFduR2EBPQIXQjYjl5z7tNEKVQd1gPrtvs2W0JWn4HJeihR5qVI8X XUkyjRDL5GcfKh7PJMBAIRWHo1pbzXysBDT+9Z62f7smp8lbB8wyuqlqCRFX0XPLURej BL1aWdapHNwHuEywnVIUXI+nWg204Mo5dEOrrfmvbIIDdnaUwYYfKB1PEidGlCeR6Ffj T++w== X-Forwarded-Encrypted: i=1; AKwUvBwlx7iTw0rs2qxWxHM7sqH468+lDJmgP9DHvrEtTKpyFkbyDSIko8jp7a4gnLXtMxQndsgUMLRgUDJpkA==@sourceware.org X-Gm-Message-State: AFq9FYIYC5Q5eZrT6eTBGprrCCD/tBkhdsm1DTAlR6Cld7YyCXn99QB7 BQF201hWZlorySIQSFEF6cPUe6sYeItPcwWri+erf/a32Fj+gsG8ELWNrurYPuCEUm9pvNIlRxB kKgiqDaQyXuWZedAAVUhWxiigsZVb1PloDV2w9TSnvbjPc8onG5DkmjOeiJa4ikMYpel/puI= X-Gm-Gg: AYBFou14jTkEXHwHEgvv+w7e7T4GmqrnnRQrHrfbn5S0byfI1VJ7AdnjofNEl8GB8w5 ZxKDkoN0g6TIq/wcwG0OdqdOn+VHgDO7C/3tVvcrS8h7FTLX1RvqhcG3xroSfN2xWx4MBSslKvH KqLE4WvoSuFLXVrViUWYPriyst6ov+O1yLdtZk4/ckxmXOcMqc1eV7csxnVsp56dgJ7lENavCXJ 0OA+OGyUClWnbc37kOvtJqGaFR5YPL0+mQiEnNnUdY8X5RP1PJDDMW37ajJgbhWriAKLgJe9+et fB8nVKbC+EUAASczNEqANoy7wJusMbCv/jkVaMSevO5Ba79xnhiZfjVJzXoZ8W4Jhal6BFi7qE9 P8Q== X-Received: by 2002:a05:620a:1a25:b0:93c:bc33:71f8 with SMTP id af79cd13be357-93ebd25ca7cmr2254640485a.43.1791904962328; Tue, 13 Oct 2026 08:22:42 -0700 (PDT) X-Received: by 2002:a05:620a:1a25:b0:93c:bc33:71f8 with SMTP id af79cd13be357-93ebd25ca7cmr2254634585a.43.1791904961622; Tue, 13 Oct 2026 08:22:41 -0700 (PDT) Received: from [192.168.42.182] ([38.74.41.78]) by smtp.gmail.com with ESMTPSA id af79cd13be357-93ef5027dd4sm261346185a.19.2026.10.13.08.22.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 13 Oct 2026 08:22:40 -0700 (PDT) Message-ID: Date: Tue, 13 Oct 2026 11:22:37 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 2/5] gdb: extend SECURITY.txt to highlight additional remote debugging risks To: Andrew Burgess , gdb-patches@sourceware.org References: <4a6d4fbc0037fcff1e4e5efc940aab03eb9e57f8.1791812758.git.aburgess@redhat.com> From: Siddhesh Poyarekar In-Reply-To: <4a6d4fbc0037fcff1e4e5efc940aab03eb9e57f8.1791812758.git.aburgess@redhat.com> X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: MMarfOu50zpNlpSnjQ_mNEEW3lCfXZTLRF1hzgy5iQE_1791904962 X-Mimecast-Originator: redhat.com Content-Language: en-US, en-CA, en-GB, en-IN Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: gdb-patches@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb-patches mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: gdb-patches-bounces~public-inbox=simark.ca@sourceware.org On 10/12/26 9:49 AM, Andrew Burgess wrote: > I had cause to re-read the SECURITY.txt document recently, and I felt > that it wasn't really clear on one aspect of using GDB with gdbserver > (or any remote target). > > I felt that the text wasn't explicit enough about how a remote target > can download executables and libraries to GDB, and how GDB can then > parse these files. When we consider the sort of bugs we see, > especially in BFD and the DWARF parser, when it comes to badly > formatted files, I thought it was worth calling this out. > --- > gdb/SECURITY.txt | 12 ++++++++++++ > 1 file changed, 12 insertions(+) > > diff --git a/gdb/SECURITY.txt b/gdb/SECURITY.txt > index f4ddebe3f03..63e110055db 100644 > --- a/gdb/SECURITY.txt > +++ b/gdb/SECURITY.txt > @@ -210,6 +210,18 @@ Security Realities Of The GDB Project > user to protect this connection, for example, by only starting > gdbserver within a secure network. > > + Additionally, when GDB connects to a remote target, it will, by > + default, automatically download the executable and shared libraries > + from the remote system and parse them locally, without prompting the > + user. This means that the risks described above relating to parsing > + malformed executables also apply when performing remote debugging. > + If the remote target is untrusted, or the connection to the remote > + target is untrusted, malicious or malformed binaries could be served This is a good guideline, but does not make clear if bugs in this processing will be treated as security issues. This is true for the line above as well, which this paragraph intends to augment - it warns the user that such behaviour is not good, but does not make a definitive statement whether bugs related to them will be treated as security issues or not. > + to GDB, resulting in any of the issues described above. Users > + should apply the same precautions when performing remote debugging > + as when analysing an untrusted binary locally, including running GDB > + in a secure, sandboxed environment. > + > Reporting Non-Security Bugs > --------------------------- >