[zapps-wg] Go implementation - Problems with Go 1.9.4

Daira Hopwood daira at z.cash
Mon Feb 19 03:33:28 EST 2018


On 14/02/18 21:36, Philip Stehlik via zapps-wg wrote:
> Hey folks,
> In case you were planning to use the go implementation for your upcoming
> participation, be aware of this issue with go 1.9.4 --
> https://github.com/golang/go/issues/23739

I honestly think the Go developers are deluding themselves if they think
that gcc and clang can be used on untrusted input just by sanitizing
compiler and linker flags; they were never designed to be secure for
untrusted input.

That said, please report which compiler flags need to be whitelisted at
<https://github.com/golang/go/issues/23749>

-- 
Daira Hopwood  ⚧Ⓐ



More information about the zapps-wg mailing list