From nobody Thu Mar 07 04:32:05 2024 X-Original-To: freebsd-toolchain@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TqxGt5MF6z5Cf7n for ; Thu, 7 Mar 2024 04:32:22 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic309-22.consmr.mail.gq1.yahoo.com (sonic309-22.consmr.mail.gq1.yahoo.com [98.137.65.148]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4TqxGs10Lzz4170 for ; Thu, 7 Mar 2024 04:32:21 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=h2uQKMg1; dmarc=pass (policy=reject) header.from=yahoo.com; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.65.148 as permitted sender) smtp.mailfrom=marklmi@yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1709785939; bh=jVkH2eRX2O4Es/jkMVTcgOSxqWz42IaqxuWAColHIDM=; h=From:Subject:Date:To:References:From:Subject:Reply-To; b=h2uQKMg1JPIdhCbEO3m0oYPSVVQkUTkj+QOZsCd4xcVFVrUriaJYxOCRZYCRekmZvVFhI38az9Xv8QAt/FqyfsCn3NIMgUAJBJDQEuzEj/hQRsaRJoI2niQRSAn7cWv28DzqPxcc3lDE+TebpUyjdYnGyjMrjQ4QooUKjDkQmfHBJSzDyGuxAGUeywnmMbJnjcUrzexzQFzSajDJ37ugxZeLPq4wKql8UtFfwQJpFckeXw525du5zPTelsL93u8pBXxzy4AHO96EVtA523b0C4KMBgRmHcz4TKdR69uoFTyYTttBbkd8VlX+lq1drnSjUwMP5c60UbAcm6138pUTVw== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1709785939; bh=tMhYAal4mSXARkkxKbCtF7tLA65nxVhm0i0vCz4s56D=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=JbcWOMeR9a9vPZGoiEg5cVFZVCnipLoa5sJfy3vkoHrPOaKQCyl/WN0/vqqPT/di/+2iHCoRfLRlKCdb8lF3gWBXDM94kr5/BRNU3ZNhcY3fTcetIICb6axGyYLxnELuArgrgU3fepjQSIl+QL5BgYw1qgxriXrTozg2V6pZYTXS5GoSn1nH0v5bxYzfkfpXzBTHWe9wRckdV9jODb+9kSpVt7/6YmkZRJLXtJIxLuEeItkA5F1YEudzdjQ+p6H//kzWUR3UIPsKx04oTThPeG+rb7M8tY4BPlrgzhMgRz1HtXAdeeYVJqS1EL6fd32RNwAHT8UnFESnGP18uJk0iw== X-YMail-OSG: 02QLdF0VM1l1h1uN_SUK1FjdjkOSxTH8gRYECQHeIuWDJkxTJZNqYZET4ztIKRU E4rFENR49vo5Mvx12GcQF2nWF2qwh9Gd4MTdUMAFH3Z9SNC1k_X_PhDU9PGa7jsBnuD8SvEbj5ks cOtUXiQubRfqSOoppmZPbpNiuTngsy5Qn2cN3k8uTjVUzCxuGZAEMf3d3RGR9w7QTFwn49yXklHJ I6ZV55AOjvuid58GzWrSH7IrqubeyKngSFOlSMnClOIJXs4xiLQ0MYCfJAdMiQHtm8WxU7zaUYgU NXq9r1BWzV22e07QmiF2G8INn9sDnYoporSKwGua8jdaiP_onXaIIytnyxuy_rm6MiUtmACJvhKD HXQbzkI3H3HJGwYnuJfcppRL1YZf98.7fSDrxS82HGgKXBRovseDM6pTGeY0eXZjeLlfXFv8IE0Q m2_skvx.cv5XMNKpNkFdSQVQQtiBKmGM2pPRefZEVVJ0pyMPdmWR7eTBr41I5tkqYOGmNfuDvIp4 zc0wtirgmj1YC4fyDciMpZhHQtPpbf6clizoaor15vYDxLfwdJQoH6uqg1gw1mc4OI4IVqU7gTDe PnPuqhXhRIwvCNci0hjCd5KIYg6eFovElgP73hW_bNsr5Ciug1LGB_pYYDqlp1bF9GYX12j1otl7 8PJ31y_IS20eCfPSG9lcO44spVrK_FEGmFuoCugehu8y0aDaoaM.5HcilrdI3jTE2VjLGVlVdT4H keRBPV4hDpGTpKywBJcXeCRbd5rvx3vT3UYbesUuC4OmVMm9jmjHZOIVhfvVd5UWmrQs060Fnm6M ola6sJzW4E.EW9y_bp2GHWn1DiKXW0zkv5YBrSTQP5hkEKIVa6BPUY93NqS5HYePmDk3V5lGN2LT NhIBuLkmnNKXiE_8_k3PgaH0It6HgxWNkl0_LV3uuNvW.ix20wSvuEDZ1tr9FrFQqmj5oN5YkRGM L_OTJ4OCjON69w6zWsNRnxFH1TKUvkvuGulOZdQb9MnqszQm6l3REfOqfQGOI3Cch2iZU4NKoDRg BLLOtdFfEuHCMQowCTXhYMlKh7aGWi9wN_2bi512PNMpARgvs3NsOAesrjOKhscYpuECbAIsg5U0 T58YbCo39.bia5.JzyiQyOcGWpYCHJcqODVMGfPO3mBNnLbXk36uC1VAL.3NPzJ4HNibetw12d39 GNuBRNJ5VJGP3AKj8PtOYGvmv1myBr2xoyMSxNUFd5eC6IkmvTHowMvVwld1HV8rtiZ0lFZ3t_.o 8uKGtBpANVqV0QLR72e8UQ6GVJ3eKS0Ea7_ES_hZt3B1r1MZ5d1QEKBJUDenpbj.Y7kr8J9PSyu5 ewvyoVEyeGDnaYAIaCuuHo5uF6l14Ixolxm.S89vg83Tg2yij9LJv.9OdTotMrYVKD6hd.y.yAOb VJ32prMXH_K_Q8igYvZp1jCKkyAbHa.uLCM8XMfIJN8kXLuQrxe0vRZGCGEgcLn5oNvpZZYLE.cS FLweS4PX7ruurVlsonmmOknIjb1szYkMAh0OTsSdkV5n9DSkf0AaXCJVV4HG3QhW0US1cpdsVqc0 aWiyRQb0TzufuSCZj4fGsObgOCpw34iJflT8yT_j7uYZWykHe91YGZDbuSyGeOQdVUz752tXAYTu o6sT0Fgvl9LqAAEh0WzwMTuA04_uYXt1StQx__TqtUw0bffyPJ_Ea24EQCp9z2gIhOQB4C3aEsIn kxqIT5dlibYj5ZaBxxugtQAOpY9cyEN5bQ2VFziq7EIPSFXJHMcVReJ4ekS4bAXhD.cCsmQmeGdk sFpoFnxqu.ROeoLT1Yvp_Ry49taYjCGtGF9k.u2Ur_Zfmpd3iHFIPr31Bc4WDvCUk.6rTkP9k857 .VwO8Gv.V1NWbHoAaVsMhj5rtTGHo0ccarvYFzkROvbzGFXw8sED59ww1QqyVHVlJUB9_CC_.PWM gmlYRwarl0HV32Fjgfq9skDipQbAdj2fL8ujS51M2PftvvQQDgTJipioRNWlTjmp89qdhuwJ2.yb 2PA3IFSIIQv2EIGEI9gBVRARv0GcWk4tJknaxmQgMFwY4J1nPv4h9Z1N51r0b50FztPq16c6Uj8G a_3HmSQi5Feo3ND2qYWn.LPTkslNmAQxESk2G8QUiG15qaKnQ72j97XxS7U6av7x1l3fViCoJRg0 aiD_8zLwWdE.cxbi2TeaJu4JxPv_zfcyfuoqQ32x848xmwc2QETjccJFY_LchT0N.rKYn7rugJuN cskitMbuAMLcAXOuMvmE_inLJAMW42LwLx6Cz2olSJkPVcY2TVvHOg9u8Cw-- X-Sonic-MF: X-Sonic-ID: 3e7fc61b-4333-4624-9865-c45f68d88de3 Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.gq1.yahoo.com with HTTP; Thu, 7 Mar 2024 04:32:19 +0000 Received: by hermes--production-gq1-5c57879fdf-hrd4s (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID b52ae5e43b446deaa12cbeaff119b4aa; Thu, 07 Mar 2024 04:32:16 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable List-Id: Maintenance of FreeBSD s integrated toolchain List-Archive: https://lists.freebsd.org/archives/freebsd-toolchain List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-toolchain@freebsd.org X-BeenThere: freebsd-toolchain@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.400.31\)) Subject: System llvm18 libc++: what will the FreeBSD LIBCXX_HARDENING_MODE be set to (one of: none, fast, extensive, debug)? Message-Id: <8938DA5F-2AE1-4EBC-8D40-303397636D0E@yahoo.com> Date: Wed, 6 Mar 2024 20:32:05 -0800 To: FreeBSD Toolchain X-Mailer: Apple Mail (2.3774.400.31) References: <8938DA5F-2AE1-4EBC-8D40-303397636D0E.ref@yahoo.com> X-Spamd-Bar: -- X-Spamd-Result: default: False [-2.90 / 15.00]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.90)[-0.902]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; TO_DN_ALL(0.00)[]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FREEMAIL_FROM(0.00)[yahoo.com]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; MLMMJ_DEST(0.00)[freebsd-toolchain@freebsd.org]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; MID_RHS_MATCH_FROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.65.148:from]; APPLE_MAILER_COMMON(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.65.148:from] X-Rspamd-Queue-Id: 4TqxGs10Lzz4170 2 of the notes for libc++ 18 for the harding mode are: QUOTE Enabling hardening has no impact on the ABI. . . . Since the static and shared library components of libc++ are built by = the vendor, setting this macro will have no impact on the hardening mode = for the pre-built components. Most libc++ code is header-based, so a = user-provided value for _LIBCPP_HARDENING_MODE will be mostly respected. END QUOTE The modes are described by: QUOTE =E2=80=A2 Unchecked mode/none, which disables all hardening checks. =E2=80=A2 Fast mode, which contains a set of security-critical = checks that can be done with relatively little overhead in constant time = and are intended to be used in production. We recommend most projects = adopt this. =E2=80=A2 Extensive mode, which contains all the checks from fast = mode and some additional checks for undefined behavior that incur = relatively little overhead but aren=E2=80=99t security-critical. = Production builds requiring a broader set of checks than fast mode = should consider enabling extensive mode. The additional rigour impacts = performance more than fast mode: we recommend benchmarking to determine = if that is acceptable for your program. =E2=80=A2 Debug mode, which enables all the available checks in the = library, including internal assertions, some of which might be very = expensive. This mode is intended to be used for testing, not in = production. END QUOTE Technically, DEBUG builds and non-DEBUG world builds could have = different FreeBSD settings for LIBCXX_HARDENING_MODE I suppose. QUOTE (relative to non-prebuilt components) Users wishing for a different hardening level to their vendor default = are able to control the level by passing one of the following options to = the compiler: -D_LIBCPP_HARDENING_MODE=3D_LIBCPP_HARDENING_MODE_NONE -D_LIBCPP_HARDENING_MODE=3D_LIBCPP_HARDENING_MODE_FAST -D_LIBCPP_HARDENING_MODE=3D_LIBCPP_HARDENING_MODE_EXTENSIVE -D_LIBCPP_HARDENING_MODE=3D_LIBCPP_HARDENING_MODE_DEBUG END QUOTE =3D=3D=3D Mark Millard marklmi at yahoo.com