[ruby-core:118641] [Ruby master Bug#20642] YJIT prevents hardening
From:
"alanwu (Alan Wu) via ruby-core" <ruby-core@...>
Date:
2024-07-19 22:27:01 UTC
List:
ruby-core #118641
Issue #20642 has been updated by alanwu (Alan Wu). There's plenty of important users of control flow integrity (or similar features on various arches), Linux kernel and Android are just a couple examples I found from a few hops on the Rust issue. So I think there is already plenty pressure, there just seem to be no one actively working to get these nightly option stabilized. Maybe Fedora could spare some resources and work with Rust to get it done? ---------------------------------------- Bug #20642: YJIT prevents hardening https://bugs.ruby-lang.org/issues/20642#change-109168 * Author: vo.x (Vit Ondruch) * Status: Open * ruby -v: ruby 3.3.4 (2024-07-09 revision be1089c8ec) [x86_64-linux] * Backport: 3.1: UNKNOWN, 3.2: UNKNOWN, 3.3: UNKNOWN ---------------------------------------- Working on #20621, it can be seen that annocheck reports: ~~~ Hardened: libruby.so.3.4.0: skip: cf-protection test because mixed Rust and C code - control flow protection is needed but not yet supported by Rust ~~~ To me it is unfair that Ruby users should make a choice between YJIT and hardening. I don't think that Ruby is going to give up YJIT, but maybe Ruby community could put some pressure on Rust? https://github.com/rust-lang/rust/issues/93754 -- https://bugs.ruby-lang.org/ ______________________________________________ ruby-core mailing list -- ruby-core@ml.ruby-lang.org To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/