From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7256 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: Re: buffer overflow in regcomp and a way to find more of those Date: Mon, 23 Mar 2015 12:28:02 -0400 Message-ID: <20150323162801.GY23507@brightrain.aerifal.cx> References: <20150321015619.GU23507@brightrain.aerifal.cx> <20150321022023.GW23507@brightrain.aerifal.cx> <20150321132810.GI16260@port70.net> <20150323123540.GP16260@port70.net> <20150323145317.GQ16260@port70.net> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1427128104 25165 80.91.229.3 (23 Mar 2015 16:28:24 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 23 Mar 2015 16:28:24 +0000 (UTC) Cc: musl@lists.openwall.com, Konstantin Serebryany To: stephen Turner Original-X-From: musl-return-7269-gllmg-musl=m.gmane.org@lists.openwall.com Mon Mar 23 17:28:18 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1Ya5D7-0007Kd-Gy for gllmg-musl@m.gmane.org; Mon, 23 Mar 2015 17:28:17 +0100 Original-Received: (qmail 20102 invoked by uid 550); 23 Mar 2015 16:28:16 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 20084 invoked from network); 23 Mar 2015 16:28:15 -0000 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Original-Sender: Rich Felker Xref: news.gmane.org gmane.linux.lib.musl.general:7256 Archived-At: On Mon, Mar 23, 2015 at 11:46:04AM -0400, stephen Turner wrote: > On Mon, Mar 23, 2015 at 10:53 AM, Szabolcs Nagy wrote: > > > * stephen Turner [2015-03-23 10:40:01 -0400]: > > > So musl doesn't have any tests currently to ensure it was built correctly > > > > it has tests, just not in the main repo > > > > > by testing its responses to calls? I have seen a few packages such as > > > binutils come with its own built in test which I would gladly make use of > > > if it was available. > > > > you can use the tests, they are available at > > http://nsz.repo.hu/git/?p=libc-test > > > > (which was supposed to be a temporary location until > > a cleanup is done..) > > > nice, i will give those a spin. Is there any consideration for making them > a feature/available in the release source files? >From a release and build system standpoint, it really makes sense to do tests separately, not integrated. The biggest reason is not making cross-compiling a special case, but isolating the concept of "libs/binaries generated for the target" as something non-executable on the host. Other packages generally do a poor job of this and then either cross-compiling breaks you you need lots of cross-specific logic in the build system. With separate tests, musl's build has no reason to care if it's being cross-compiled, and testing a cross-compiled libc (if you feel a need to) is a matter of how you script the build of everything for the cross toolchain and environment rather. Other than that, nsz has aimed to make all the tests libc-agnostic, so they can also be used to test other libcs for conformance and bugs. This works well with glibc already but uclibc has so much missing that lots of the tests are gratuitously failing. Rich