search for: safety

This used to be a single patch, but I split it into two with the addition of struct Scatterlist. Again a bit new with Rust submissions. I was told by Gary Guo to rebase on top of rust-next, but it seems *very* behind? The first patch does not build on its own due to a dead_code warning. It is hard to not have dead code when one is adding infrastructure to be used by others at a later

This is a proposal to create memory safety instrumentation and optimization passes for LLVM. Abstract: The goal of this project is to modify SAFECode and AddressSanitizer (ASAN) to use a common set of memory safety instrumentation and optimization passes to increase code reuse. These tools and other similar ones use varying methods to dete...

...adjust SAFECode's instrumentation to what Nuno needs (one pass removes checks that are too expensive; the other inlines the fast checks to remove function call overhead). That code can still be found at http://sva.cs.illinois.edu/fastsc-llvm.tar.gz. I wrote a proposal for a common memory safety instrumentation infrastructure and sent it to llvm-commits. Would it be useful to send it to llvmdev as well for discussion, or has everyone who's already interested seen it? Having said all this, if exploit mitigation is the goal, I think it might be worth taking a step back and first de...

Hello, I'm trying to avoid having to design my own IR for a hobby language that needs safety guarantees similar to those of Java. Have there been any plans or attempts to write a safety verifier for llvm object code or define a set of easily verifiable instructions that can be translated to llvm quickly?

...1st Ed) and the docs on the rails site (*and* the Mongrel FAQ) tell me that rails (& ActionPack /ActiveRecord) is not threadsafe. Since I need lots of worker threads in the app I''m working on (details at the end of this mail) this poses quite a problem for me. Is the lack of thread safety a conscious design decision (kind of understandable for rails as such, but IMHO strange for ActiveRecord) or just something nobody has found the time to take care of yet? Is there any documentation on what exactly lacks thread safety? From http://wiki.rubyonrails.org/rails/pages/HowTosWorkerThr...

...for a > while, and I would like to participate in this year's Summer of Code. > One particular idea, in your "open projects" page caught my eye, and I > decided to write a proposal about it. The line that I liked in the > page was "Create an LLVM pass that adds memory safety checks to code, > like Valgrind does for binaries, or like mudflap does for gcc compiled > code.", and my proposal is written below: Hi Raphael! I haven't read your proposal in detail, but there are actually three projects that implement memory safety by transforming LLVM bitcode:...

...al, the solution is likely to be wrong. The proposed bounds-checking will cover a tiny portion of buffer overflows and will not cover use-after-free or stack corruption at all. If the documentation will say something like "it prevents run-time exploitation", users may get a false sense of safety which will make matter worse. Note that asan does not claim to "prevent run-time exploitation", because in general case it does not. If we want full prevention, we need to use another kind of sandbox (e.g. Native Client). --kcc > Nuno, please correct me if I'm wrong. > >...

...asses will simply consult the metadata. Equally important would be an exhaustive test suite. Not sure if it should be in LLVM IR or in C (if in C, other compilers will benefit too). On Thu, Apr 5, 2012 at 6:49 PM, Ott Tinn <llvm at otinn.com> wrote: > This is a proposal to create memory safety instrumentation and > optimization passes for LLVM. > > Abstract: > The goal of this project is to modify SAFECode and AddressSanitizer > (ASAN) to use a common set of memory safety instrumentation and > optimization passes to increase code reuse. These tools and other > simila...

Is there a way to limit outbound calls when feeding files to the outgoing directory in asterisk? I several thousand files i need to feed asterisk, hoping to copy it to the outgoing directory all at 1 time.

Anyone know if the MySQL() application has a configurable timeout? If it tries to connect to a bogus IP, it's timeout seems to be a few minutes. I'd like to cut it down to a few seconds. Doug. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part --------------

...g this file, enabled them to get voice mail. Is anybody else seeing this? The system is a new install and has only been running for a week with very little traffic (8 person office). Doug -- Ben Franklin quote: "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety." -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120628/aeab81dc/attachment.htm>

I was just wondering what existing work has been done on proving programs type-safe using the LLVM framework? I've read the paper on memory-safety for embedded systems, but that's not quite what I'm looking for, as my application (which involves running untrusted code within a trusted context) might fail if a pointer to one object became a pointer to another of the same type. Looking at the documentation, it seems a trivial check for...

...t; <elena.demikhovsky at intel.com>, llvmdev at cs.uiuc.edu > Sent: Friday, October 24, 2014 11:56:14 AM > Subject: Re: [LLVMdev] Adding masked vector load and store intrinsics > > Hal Finkel <hfinkel at anl.gov> writes: > > >> If this were really a question of safety, I'd agree. And if we > >> were > >> talking about gather loads, I'd agree. For a regular vector loads, > >> I > >> don't see this as a safety issue. We should outline what the > >> downside of emitting a regular load would actually be should...

...ffff" text="#000000"> <font size="-1"><font face="Helvetica, Arial, sans-serif">Hello list,<br> <br> is it save to send manager events from a remote website (php) to an Asterisk-server ? Is there some tutorial on how to implement a tight safety policy ?<br> <br> <br> Jonas.<br> </font></font> </body> </html>

...at work aims to make ordinary C and C++ programs memory-safe, without using garbage collection or any other automatic memory management scheme, i.e., allowing dangling pointers but ensuring they are harmless. It also allows any casts that are legal in C. If you want to enforce strict type safety with GC and without arbitrary casts, you should be able to build on top of SAFECode and provide a garbage collector. You'd have to define what pointer casts are legal and check for them. But SAFECode would give you several other checks you need including: -- array bounds (just looking...

...t thread safe and Rubinius provides a multithreaded system. We can relatively easily get locking setup around the getenv() calls we do in Rubinius, but that's really complex to be able to do for LLVM. I also don't know what the guarantees are here that LLVM wants to provide regarding thread safety of code that happens to have a getenv() call inside it. What would be the best approach to solving this? Would it be necessary to put locking around this inside our usage of LLVM? Should LLVM provide a locking mechanism for this or should there be a way to make the getenv() calls optional in the p...

...ave been using LLVM for a while, and I would like to participate in this year's Summer of Code. One particular idea, in your "open projects" page caught my eye, and I decided to write a proposal about it. The line that I liked in the page was "Create an LLVM pass that adds memory safety checks to code, like Valgrind does for binaries, or like mudflap does for gcc compiled code.", and my proposal is written below: ================================================ Adding memory safety checks to the LLVM bitcodes ================================================ Objective ----...

...binius > provides a multithreaded system. We can relatively easily get locking setup > around the getenv() calls we do in Rubinius, but that's really complex to > be able to do for LLVM. I also don't know what the guarantees are here that > LLVM wants to provide regarding thread safety of code that happens to have > a getenv() call inside it. > > What would be the best approach to solving this? Would it be necessary to > put locking around this inside our usage of LLVM? Should LLVM provide a > locking mechanism for this or should there be a way to make the getenv()...

Can you say a Virtualized Asterisk with a PRI card! http://www.phoronix.com/scan.php?page=news_item&px=OTY0OQ Doug -- Ben Franklin quote: "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

...C (if in C, other compilers > will benefit too). Wilander has a new suite of tests out that might be useful. -- John T. > > On Thu, Apr 5, 2012 at 6:49 PM, Ott Tinn <llvm at otinn.com > <mailto:llvm at otinn.com>> wrote: > > This is a proposal to create memory safety instrumentation and > optimization passes for LLVM. > > Abstract: > The goal of this project is to modify SAFECode and AddressSanitizer > (ASAN) to use a common set of memory safety instrumentation and > optimization passes to increase code reuse. These tools a...