IRC channel logs

2021-11-03.log

back to list of logs

<stikonas>and stage0-posix updated to pull in new functionality https://github.com/oriansj/stage0-posix/pull/64
<stikonas>and also mes-m2 fix https://github.com/oriansj/mes-m2/pull/15
<oriansj>the reason has to do with https://github.com/oriansj/stage0-posix/blob/master/x86/M0_x86.hex2#L597
<oriansj>specifically %0xabcd just results in 00000000 while %0xABCD works just fine
<oriansj>and merged
<stikonas>oh yes, M0 did not support lowercase alphanumerics...
<oriansj>and MesCC had a bug where it didn't support uppercase alphanumerics
<oriansj>So I punted and used lowercase for MesCC and did that ugly hack for stage0-posix
<oriansj>it also made pull requests where people were not strict about uppercase didn't break the bootstrap
***robin_ is now known as robin
*pabs3 hmm at "Adding package information to ELF objects" https://lwn.net/SubscriberLink/874642/da8951a8b8a695ac/
<Hagfish> https://www.micahlerner.com/2021/10/31/rudra-finding-memory-safety-bugs-in-rust-at-the-ecosystem-scale.html
<Hagfish>" at the time of the paper’s publication, the system had identified 76 CVEs and ~52% of the memory safety bugs in the official Rust security advisory database"
<Hagfish>"To make the point about how tricky (and novel) some of these problems were to detect before Rudra found them, the paper notes that several of the issues were in the Rust standard library (which is reviewed by Rust experts)."
<Hagfish>oof
***nckx is now known as Thunderbi
***Thunderbi is now known as guix-znc-test
***guix-znc-test is now known as guix
***guix is now known as nckx
<gbrlwck>pabs3: Is Lennart Poettering an enemy of reproducible builds?
<oriansj>gbrlwck: No, he just values other things more than reproducible builds and he does merge reproducibility patchs.
<oriansj>Hagfish: I like to think of it as a healthy reminder of how easy it is for humans to trick ourselves that everything correct. We can always do better and together it gets easier.
<oriansj>pabs3: well if one really wanted package information in ELF objects, one could rather easily put a gz or xz blob in .source.${filename}
<oriansj>toss in .build.blob containing the build command and you have everything you need to rebuild the binary from source.
***ChanServ sets mode: +o janneke
<stikonas>and if some container creators strip package db metadata from images (to minimize space) why wouldn't they remove this additional package information from ELF objects, it will be just like another debug symbol stripping...
<Hagfish>good points, thank you both
***DiffieHellman_ is now known as DiffieHellman