* [ruby-core:118639] [Ruby master Bug#20642] YJIT prevents hardening
@ 2024-07-19 16:04 vo.x (Vit Ondruch) via ruby-core
2024-07-19 22:27 ` [ruby-core:118641] " alanwu (Alan Wu) via ruby-core
0 siblings, 1 reply; 2+ messages in thread
From: vo.x (Vit Ondruch) via ruby-core @ 2024-07-19 16:04 UTC (permalink / raw)
To: ruby-core; +Cc: vo.x (Vit Ondruch)
Issue #20642 has been reported by vo.x (Vit Ondruch).
----------------------------------------
Bug #20642: YJIT prevents hardening
https://bugs.ruby-lang.org/issues/20642
* Author: vo.x (Vit Ondruch)
* Status: Open
* ruby -v: ruby 3.3.4 (2024-07-09 revision be1089c8ec) [x86_64-linux]
* Backport: 3.1: UNKNOWN, 3.2: UNKNOWN, 3.3: UNKNOWN
----------------------------------------
Working on #20621, it can be seen that annocheck reports:
~~~
Hardened: libruby.so.3.4.0: skip: cf-protection test because mixed Rust and C code - control flow protection is needed but not yet supported by Rust
~~~
To me it is unfair that Ruby users should make a choice between YJIT and hardening. I don't think that Ruby is going to give up YJIT, but maybe Ruby community could put some pressure on Rust?
https://github.com/rust-lang/rust/issues/93754
--
https://bugs.ruby-lang.org/
______________________________________________
ruby-core mailing list -- ruby-core@ml.ruby-lang.org
To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org
ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/
^ permalink raw reply [flat|nested] 2+ messages in thread
* [ruby-core:118641] [Ruby master Bug#20642] YJIT prevents hardening
2024-07-19 16:04 [ruby-core:118639] [Ruby master Bug#20642] YJIT prevents hardening vo.x (Vit Ondruch) via ruby-core
@ 2024-07-19 22:27 ` alanwu (Alan Wu) via ruby-core
0 siblings, 0 replies; 2+ messages in thread
From: alanwu (Alan Wu) via ruby-core @ 2024-07-19 22:27 UTC (permalink / raw)
To: ruby-core; +Cc: alanwu (Alan Wu)
Issue #20642 has been updated by alanwu (Alan Wu).
There's plenty of important users of control flow integrity (or similar features on various arches), Linux kernel and Android are just a couple examples I found from a few hops on the Rust issue. So I think there is already plenty pressure, there just seem to be no one actively working to get these nightly option stabilized.
Maybe Fedora could spare some resources and work with Rust to get it done?
----------------------------------------
Bug #20642: YJIT prevents hardening
https://bugs.ruby-lang.org/issues/20642#change-109168
* Author: vo.x (Vit Ondruch)
* Status: Open
* ruby -v: ruby 3.3.4 (2024-07-09 revision be1089c8ec) [x86_64-linux]
* Backport: 3.1: UNKNOWN, 3.2: UNKNOWN, 3.3: UNKNOWN
----------------------------------------
Working on #20621, it can be seen that annocheck reports:
~~~
Hardened: libruby.so.3.4.0: skip: cf-protection test because mixed Rust and C code - control flow protection is needed but not yet supported by Rust
~~~
To me it is unfair that Ruby users should make a choice between YJIT and hardening. I don't think that Ruby is going to give up YJIT, but maybe Ruby community could put some pressure on Rust?
https://github.com/rust-lang/rust/issues/93754
--
https://bugs.ruby-lang.org/
______________________________________________
ruby-core mailing list -- ruby-core@ml.ruby-lang.org
To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org
ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2024-07-19 22:27 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-07-19 16:04 [ruby-core:118639] [Ruby master Bug#20642] YJIT prevents hardening vo.x (Vit Ondruch) via ruby-core
2024-07-19 22:27 ` [ruby-core:118641] " alanwu (Alan Wu) via ruby-core
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).