Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1313002 > unrolled thread
| Started by | Viktor Pashaiev <w.paszajew@gmail.com> |
|---|---|
| First post | 2026-10-13 11:20 +0200 |
| Last post | 2026-10-13 11:20 +0200 |
| Articles | 1 — 1 participant |
Back to article view | Back to linux.debian.bugs.dist
Bug#1150752: aflplusplus: afl-cc mistakenly treats -fcf-protection as CFISAN request Viktor Pashaiev <w.paszajew@gmail.com> - 2026-10-13 11:20 +0200
| From | Viktor Pashaiev <w.paszajew@gmail.com> |
|---|---|
| Date | 2026-10-13 11:20 +0200 |
| Subject | Bug#1150752: aflplusplus: afl-cc mistakenly treats -fcf-protection as CFISAN request |
| Message-ID | <NNGPU-5eTQ-5@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Package: aflplusplus
Version: 5.02c-0.5
Severity: normal
Tags: patch upstream
User: ubuntu-devel@lists.ubuntu.com
Usertags: origin-ubuntu stonking
Dear Maintainer,
In src/afl-cc.c, the compiler flag -fcf-protection is parsed as:
} else if (!strncmp(cur_argv, "-fcf-protection", strlen("-fcf-protection"))) {
SCAN_KEEP(aflcc->have_cfisan, 1);
This incorrectly records -fcf-protection as a CFISAN request, which injects -flto in clang mode and disables PCGUARD instrumentation. As a result, compiling targets with -fcf-protection (and self-tests on systems where -fcf-protection is enabled by default) breaks.
Upstream already addressed this in commit a9e8587ee86c8ff20a14de6aea6ec07d7d3f699f:
https://github.com/AFLplusplus/AFLplusplus/commit/a9e8587ee86c8ff20a14de6aea6ec07d7d3f699f
The backported patch is attached.
Back to top | Article view | linux.debian.bugs.dist
csiph-web