[cfe-dev] GCC's -fmpx in clang?

[Carsten Mattner]

On Sun, Sep 14, 2014 at 11:07 AM, Szabolcs Nagy <nsz at port70.net> wrote:
> * Reid Kleckner <rnk at google.com> [2014-09-13 18:37:57 -0700]:
>> Not that I know of. So far as I know, ASan is superior to any MIX based
>> instrumentation. The only class of false negatives I know of is arrays in
>> structs, which there are plans for.
>>
>
> mpx is new to me, but looking at the docs it solves a different
> problem than asan
>
> asan must not be used in production code, it's not a hardening
> solution, but a debugging one (it actually increases the attack
> surface by all its instrumentations, its own set of reliance on
> ub and strong interdependency on libc internals)
>
> mpx is for hardening deployed code with bounds check instructions

gcc: http://gcc.gnu.org/wiki/Intel%20MPX%20support%20in%20the%20GCC%20compiler

glibc:
https://sourceware.org/ml/libc-alpha/2014-03/msg00491.html
https://sourceware.org/ml/libc-alpha/2014-03/msg00543.html
https://sourceware.org/ml/libc-alpha/2014-03/msg00605.html

Linux kernel: https://lkml.org/lkml/2014/9/11/182