Enable Wbounded by default. Passing bound bigger than the buffer
size almost always has security implications. I think this quote
from Theo summarizes the situation best:

Which is why it is import

Enable Wbounded by default. Passing bound bigger than the buffer
size almost always has security implications. I think this quote
from Theo summarizes the situation best:

Which is why it is important to have at least one unforgiving
platform in the ecosystem which properly labels shit shit.

That's OpenBSD. If anyone can't handle that, they can go to platforms
which hide the reality.

show more ...

Port the -Wbounded extension from gcc3 to gcc4. Based on work started by
jasper@.

This omits the sizeof(pointer) tracking which is very difficult to
implement for gcc4 due to internal changes.

Than

Port the -Wbounded extension from gcc3 to gcc4. Based on work started by
jasper@.

This omits the sizeof(pointer) tracking which is very difficult to
implement for gcc4 due to internal changes.

Thanks to landry@ for running through a ports bulk build and both
landry@ and jasper@ for fixing a few issues.

ok deraadt millert jasper

show more ...

port -ftrampolines/-Wtrampolines support from gcc3.
comments and okay kettenis@

Accept and ignore -Wbounded, fully implementing this is in the works
but this makes things less painful for people for the time being.

ok kettenis@ robert@

import of gcc-4.2.1, the last gcc release under GPLv2