search for: qspectre

...mendation is to run it at –O2). It's also enabled in the LTO pipeline so can detect cases of cross module inlining with -flto. The code is on phabricator: https://reviews.llvm.org/D43643 Paul Kocher (one of the researchers who wrote the Spectre paper) recently had a look at Microsoft’s /Qspectre flag: https://www.paulkocher.com/doc/MicrosoftCompilerSpectreMitigation.html Out of 15 examples Microsoft’s compiler was able to detect 2 (admittedly some of the examples are very hard to detect without huge numbers of false positives). The Sceptre detector in its current form detects 9/15 (...

...ad of this approach is, simply put, catastrophic. Yet it remains the only truly "secure by default" approach known prior to this effort and serves as the baseline for performance. One attempt to address the performance overhead of this and make it more realistic to deploy is [MSVC's /Qspectre switch]( https://blogs.msdn.microsoft.com/vcblog/2018/01/15/spectre-mitigations-in-msvc/ ). Their technique is to use static analysis within the compiler to only insert `lfence` instructions into conditional edges at risk of attack. However, initial analysis (still under embargo) has shown that thi...