Re: Threat model for GNU Binutils

Richard Earnshaw via Gdb
2023-04-14T15:08:15Z

On 14/04/2023 15:08, Siddhesh Poyarekar wrote:
> There's also a (rare) possibility of an infrequently used instruction
> having incorrect opcode mapping, resulting in a bug being masked when
> dumped with objdump or resulting code having undefined behaviour.

The best way to deal with this risk is to run test binaries generated by
the tools through an independently developed toolchain; something I
mentioned in the mitigation section. The chances of a common-mode
failure leading to the same bug in both sets of tools is very low.

R.