GCC Compiler 4.3.0 exposes a Linux / BSD kernel bug

Since version 4.3, gcc changed its behavior concerning the x86/x86-64 ABI and the direction flag, that is it now assumes that the direction flag is cleared at the entry of a function and it doesn't clear once more if needed. According to LWN article GCC 4.3.0 exposes a kernel bug:

A change to GCC for a recent release coupled with a kernel bug has created a messy situation, with possible security implications. GCC changed some assumptions about x86 processor flags, in accordance with the ABI standard, that can lead to memory corruption for programs built with GCC 4.3.0. No one has come up with a way to exploit the flaw, at least yet, but it clearly is a problem that needs to be addressed.

=> GCC 4.3.0 exposes a kernel bug (via ./)

Want to read Linux tips and tricks, but don't have time to check our blog everyday? Subscribe to our daily email newsletter to make sure you don't miss a single tip/tricks. Subscribe to our weekly newsletter here!

{ 3 comments… read them below or add one }

1 marc 03.19.08 at 8:15 pm

FreeBSD doesn’t use GCC4.3 for kernel and world.

gcc version 4.2.1 20070719 [FreeBSD] this is the version in FreeBSD 7.0R. So it’s *maybe* a problem for the Linux kernel, while using anything bleeding edge.

2 Nilesh 03.20.08 at 11:45 am

At least Fedora developers release application versions after testing and changing them a bit. :)

I have 4.1.2. I updated two days ago but gcc hasn’t changed.

BTW, what happened to the kernel bug ??

When I updated two days ago, kernel was updated to

2.6.24.3-34.fc8

This is quite late after the kernel 2.6.24 was released.

3 tirumala rao 04.21.08 at 6:02 pm

hi,
I have fedora 3 , what shall I do to install gcc4.3 , to work with opanMP.

Thanking you

Leave a Comment

You can use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Previous post: Sun To Offer Ubuntu Linux Based Servers

Next post: Google Code University: Learn How To Code / Program