* Re: Nested Function Patches
@ 2005-12-23 16:30 andre-smith
0 siblings, 0 replies; 8+ messages in thread
From: andre-smith @ 2005-12-23 16:30 UTC (permalink / raw)
To: The development of GRUB 2
Hehe. I thought someone would say that :-). I just thought I would try one last time. I am switching over to Ubuntu for my development environment. In the future, I hope Apple discusses changes like this with the community and get consensus before crippling a major tool. Sorry for any noise that I may have caused.
Andre
> -----Original Message-----
> From: Marco Gerards [mailto:mgerards@xs4all.nl]
> Sent: Friday, December 23, 2005 08:33 AM
> To: 'The development of GRUB 2'
> Subject: Re: Nested Function Patches
>
> Andre Smith <andre-smith@speakeasy.net> writes:
>
> > As I mentioned before, Apple has disabled nested function support for
> > GRUB2. Would the group be willing to accept patches addressing this
> > issue? I would like to see GRUB2 on Mac OS X. I do have a very simple
> > patch for help.c, and I would like continue the work with the groups
> > blessing.
>
> You can better send a patch to the apple folks, they broke nested
> functions. See the previous discussion about this on the mailinglist.
>
> --
> Marco
>
>
>
> _______________________________________________
> Grub-devel mailing list
> Grub-devel@gnu.org
> http://lists.gnu.org/mailman/listinfo/grub-devel
>
^ permalink raw reply [flat|nested] 8+ messages in thread* Nested Function Patches @ 2005-12-23 2:53 Andre Smith 2005-12-23 8:33 ` Marco Gerards 0 siblings, 1 reply; 8+ messages in thread From: Andre Smith @ 2005-12-23 2:53 UTC (permalink / raw) To: The development of GRUB 2 As I mentioned before, Apple has disabled nested function support for GRUB2. Would the group be willing to accept patches addressing this issue? I would like to see GRUB2 on Mac OS X. I do have a very simple patch for help.c, and I would like continue the work with the groups blessing. ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2005-12-23 2:53 Andre Smith @ 2005-12-23 8:33 ` Marco Gerards 2005-12-28 8:08 ` Peter Jones 0 siblings, 1 reply; 8+ messages in thread From: Marco Gerards @ 2005-12-23 8:33 UTC (permalink / raw) To: The development of GRUB 2 Andre Smith <andre-smith@speakeasy.net> writes: > As I mentioned before, Apple has disabled nested function support for > GRUB2. Would the group be willing to accept patches addressing this > issue? I would like to see GRUB2 on Mac OS X. I do have a very simple > patch for help.c, and I would like continue the work with the groups > blessing. You can better send a patch to the apple folks, they broke nested functions. See the previous discussion about this on the mailinglist. -- Marco ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2005-12-23 8:33 ` Marco Gerards @ 2005-12-28 8:08 ` Peter Jones 2006-01-09 15:06 ` Yoshinori K. Okuji 0 siblings, 1 reply; 8+ messages in thread From: Peter Jones @ 2005-12-28 8:08 UTC (permalink / raw) To: The development of GRUB 2 On Fri, 2005-12-23 at 09:33 +0100, Marco Gerards wrote: > Andre Smith <andre-smith@speakeasy.net> writes: > > > As I mentioned before, Apple has disabled nested function support for > > GRUB2. Would the group be willing to accept patches addressing this > > issue? I would like to see GRUB2 on Mac OS X. I do have a very simple > > patch for help.c, and I would like continue the work with the groups > > blessing. > > You can better send a patch to the apple folks, they broke nested > functions. See the previous discussion about this on the mailinglist. That's taking the very unrealistic point of view that using nested functions isn't broken. It is, in a great many ways which have already been discussed in depth, and which you've, rather disturbingly, chosen to ignore. Using "features" which require an executable stack is still just a bad idea. It's too bad that the grub project has chosen to ignore the pragmatic implications of code structure and style. -- Peter ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2005-12-28 8:08 ` Peter Jones @ 2006-01-09 15:06 ` Yoshinori K. Okuji 2006-01-09 18:13 ` Peter Jones 0 siblings, 1 reply; 8+ messages in thread From: Yoshinori K. Okuji @ 2006-01-09 15:06 UTC (permalink / raw) To: The development of GRUB 2 On Wednesday 28 December 2005 09:08 am, Peter Jones wrote: > That's taking the very unrealistic point of view that using nested > functions isn't broken. It is, in a great many ways which have already > been discussed in depth, and which you've, rather disturbingly, chosen > to ignore. Using "features" which require an executable stack is still > just a bad idea. > > It's too bad that the grub project has chosen to ignore the pragmatic > implications of code structure and style. I'm sick of your FUD. If you are an engineer or programmer, show a technical reason. All you have mentioned are: - Red Hat does not ship programs with nested functions - You feel that it is safer - Everybody is going to disable executable stacks Where is such a discussion in depth? Is this time before renaissance? I understand the behavior of Red Hat, since Red Hat is after all a commercial entity, so it must make business from marketing point of view. But GRUB is not tied with such an activity. We are open to opinions, but you should not insult the project or the members only because our technical decision is not compatible with your own desire. Okuji ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2006-01-09 15:06 ` Yoshinori K. Okuji @ 2006-01-09 18:13 ` Peter Jones 2006-01-10 10:17 ` Marco Gerards 2006-01-10 16:14 ` Yoshinori K. Okuji 0 siblings, 2 replies; 8+ messages in thread From: Peter Jones @ 2006-01-09 18:13 UTC (permalink / raw) To: The development of GRUB 2 On Mon, 2006-01-09 at 16:06 +0100, Yoshinori K. Okuji wrote: > On Wednesday 28 December 2005 09:08 am, Peter Jones wrote: > > That's taking the very unrealistic point of view that using nested > > functions isn't broken. It is, in a great many ways which have already > > been discussed in depth, and which you've, rather disturbingly, chosen > > to ignore. Using "features" which require an executable stack is still > > just a bad idea. > > > > It's too bad that the grub project has chosen to ignore the pragmatic > > implications of code structure and style. > > I'm sick of your FUD. There's no FUD here. The grub project *has* chosen to ignore the implications of this, and you continue to do so. > If you are an engineer or programmer, show a technical > reason. This is just plain insulting; I've sent you numerous patches for various things and tried, on several occasions fairly successfully, to cooperate with you. I've got more patches which could be beneficial as well, though mostly they're in a state where they're not suitable for upstream yet, and I expect you know this if you're even paying the slightest bit of attention to how people are using grub. The fact that we disagree on this point hardly justifies the insinuation that I'm not "an engineer or a programmer". Above that, I *have* cited technical reasons, and you don't seem to be interested in them. > All you have mentioned are: > > - Red Hat does not ship programs with nested functions Yes, and that trend will certainly continue. > - You feel that it is safer I haven't said anything about what I "feel", and you're putting it this way to try to unrealistically discredit my statements. It is demonstrably safer not to have executable stacks, and I have mentioned that and quoted the figures to do so. Nested functions mandate the use of executable stacks. Thus, it is safer not to use nested functions. > - Everybody is going to disable executable stacks I don't think I've said everybody, but I have said that the trend is towards more OSes doing this. Is this somehow not clearly true. > Where is such a discussion in depth? Is this time before renaissance? Off the top of my head, this discussion has been pretty constant for the last 10 or so years on linux-kernel, and was fairly prominent in the last year on the mailing lists for binutils, gcc, and glibc. It's also been a topic of discussion on quite a few other lists, and as far as I'm aware no other project has had any serious problem with making their stacks non-executable when there was no technical reason for them to be executable. Your like of nested functions isn't a technical reason -- you think it's pretty, and that's pretty much the end of the reasoning. I'm not going to argue about if those aesthetic values are reasonable or not, but I will reiterate that there has been no technical reason presented, even when very politely without any hint of ridicule or chastising, for using any feature which requires an executable stack. So don't talk about me spreading FUD when I haven't, or of not citing technical reasons. I have, and you've cited only aesthetic ones. > I understand the behavior of Red Hat, since Red Hat is after all a commercial > entity, so it must make business from marketing point of view. You clearly do not. It isn't *at all* about any marketing point of view. Programs with executable stacks are demonstrably exploited more than those without, and that includes programs not foreseen to be run in a way where overruns could result in an exploit. That's the real world, which you're ignoring. > But GRUB is > not tied with such an activity. We are open to opinions, but you should not > insult the project or the members only because our technical decision is not > compatible with your own desire. If I've insulted you, I apologize, for I've had no intent on doing so. I do, however, continue to recognize that the grub project is ignoring security concerns. I'm still dismayed over this, because I'd like grub to continue getting better. And I'm going to continue trying to help make it so in the foreseeable future, both regarding this problem and others, even though I understand that some times you'll refuse to take what I say into account, or make some other choice. You're free to do so, but insulting me because I mentioned when you've done so is really pretty petty. -- Peter ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2006-01-09 18:13 ` Peter Jones @ 2006-01-10 10:17 ` Marco Gerards 2006-01-10 16:14 ` Yoshinori K. Okuji 1 sibling, 0 replies; 8+ messages in thread From: Marco Gerards @ 2006-01-10 10:17 UTC (permalink / raw) To: The development of GRUB 2 Peter Jones <pjones@redhat.com> writes: > On Mon, 2006-01-09 at 16:06 +0100, Yoshinori K. Okuji wrote: >> On Wednesday 28 December 2005 09:08 am, Peter Jones wrote: >> > That's taking the very unrealistic point of view that using nested >> > functions isn't broken. It is, in a great many ways which have already >> > been discussed in depth, and which you've, rather disturbingly, chosen >> > to ignore. Using "features" which require an executable stack is still >> > just a bad idea. >> > >> > It's too bad that the grub project has chosen to ignore the pragmatic >> > implications of code structure and style. >> >> I'm sick of your FUD. > > There's no FUD here. The grub project *has* chosen to ignore the > implications of this, and you continue to do so. I have added looking at this issue to the TODO list and written a page with information about this issue on the wiki. Why do you call this ignoring? Perhaps we do not do exactly what you want us to do, but we are aware of the situation. I think it is our business to deal with in in the way we think is appropriate. >> If you are an engineer or programmer, show a technical >> reason. > > This is just plain insulting; I've sent you numerous patches for various > things and tried, on several occasions fairly successfully, to cooperate > with you. I've got more patches which could be beneficial as well, > though mostly they're in a state where they're not suitable for upstream > yet, and I expect you know this if you're even paying the slightest bit > of attention to how people are using grub. Sorry, but what are you talking about? I haven't seen patches for GRUB 2 from you. Perhaps I have missed something and we can work this out. Can you explain what you mean with "how people are using grub"? > The fact that we disagree on this point hardly justifies the insinuation > that I'm not "an engineer or a programmer". Above that, I *have* cited > technical reasons, and you don't seem to be interested in them. And I would suggest we will keep this discussion technical. I think Okuji means that you didn't show us exactly why nested functions should be removed. You seem to forget that: a) Nested functions don't cause problems in every occasion. b) The GCC developers didn't consider removing nested functions. So they are not deprecated or broken like you suggested. I think this is what Okuji referred to when he said FUD. c) GRUB is just like GCC a GNU project. >> - You feel that it is safer > > I haven't said anything about what I "feel", and you're putting it this > way to try to unrealistically discredit my statements. It is > demonstrably safer not to have executable stacks, and I have mentioned > that and quoted the figures to do so. Nested functions mandate the use > of executable stacks. Thus, it is safer not to use nested functions. Why don't you send an email describing these problems, or perhaps a patch, to the GCC developers? Your opinion how to deal with stacks conflict with the idea how nested functions are implemented. So these implementation issues are a bit off-topic here, I think. Have you contacted the GCC developers already? I did. >> - Everybody is going to disable executable stacks > > I don't think I've said everybody, but I have said that the trend is > towards more OSes doing this. Is this somehow not clearly true. > >> Where is such a discussion in depth? Is this time before renaissance? > > Off the top of my head, this discussion has been pretty constant for the > last 10 or so years on linux-kernel, and was fairly prominent in the > last year on the mailing lists for binutils, gcc, and glibc. It's also > been a topic of discussion on quite a few other lists, and as far as I'm > aware no other project has had any serious problem with making their > stacks non-executable when there was no technical reason for them to be > executable. Your like of nested functions isn't a technical reason -- > you think it's pretty, and that's pretty much the end of the reasoning. It is. About the discussions on the linux kernel mailinglist. I have seen patches in the past that disable executable stacks, but don't break nested functions. Why weren't those used instead? But I am afraid that is also off-topic here. > I'm not going to argue about if those aesthetic values are reasonable or > not, but I will reiterate that there has been no technical reason > presented, even when very politely without any hint of ridicule or > chastising, for using any feature which requires an executable stack. > So don't talk about me spreading FUD when I haven't, or of not citing > technical reasons. I have, and you've cited only aesthetic ones. Those reasons are as good as any other. If the code is somehow crippled it will make it hard to maintain. >> I understand the behavior of Red Hat, since Red Hat is after all a commercial >> entity, so it must make business from marketing point of view. > > You clearly do not. It isn't *at all* about any marketing point of > view. Programs with executable stacks are demonstrably exploited more > than those without, and that includes programs not foreseen to be run in > a way where overruns could result in an exploit. That's the real world, > which you're ignoring. You could also say that the people who disabled execution on the stack ignored existing features. Instead of changing the way trampolines are implemented, you just have thrown the switch and disabled all this. As you see it is just a matter of perspective. Too bad this discussion is rapidly heading in the wrong direction. Perhaps we don't all agree on the direction of GRUB, but I think that is up to the GRUB maintainers. But certainly we need to be able and remain to be able to discuss on issues on a technical level. -- Marco ^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: Nested Function Patches 2006-01-09 18:13 ` Peter Jones 2006-01-10 10:17 ` Marco Gerards @ 2006-01-10 16:14 ` Yoshinori K. Okuji 1 sibling, 0 replies; 8+ messages in thread From: Yoshinori K. Okuji @ 2006-01-10 16:14 UTC (permalink / raw) To: The development of GRUB 2 On Monday 09 January 2006 07:13 pm, Peter Jones wrote: > There's no FUD here. The grub project *has* chosen to ignore the > implications of this, and you continue to do so. As I said, I don't take your claim serious until you show a good reason. This is not ignoring but rejecting. > This is just plain insulting; I've sent you numerous patches for various > things and tried, on several occasions fairly successfully, to cooperate > with you. I've got more patches which could be beneficial as well, > though mostly they're in a state where they're not suitable for upstream > yet, and I expect you know this if you're even paying the slightest bit > of attention to how people are using grub. I'm sorry if I just forget your contribution, but I really don't remember what you have done under the term of cooperation. > The fact that we disagree on this point hardly justifies the insinuation > that I'm not "an engineer or a programmer". Above that, I *have* cited > technical reasons, and you don't seem to be interested in them. I simply don't know your job, so I can't say if you are a programmer or not. And, I don't see any technical reason in the context of GRUB at all. > > - You feel that it is safer > > I haven't said anything about what I "feel", and you're putting it this > way to try to unrealistically discredit my statements. It is > demonstrably safer not to have executable stacks, and I have mentioned > that and quoted the figures to do so. Nested functions mandate the use > of executable stacks. Thus, it is safer not to use nested functions. You have not mentioned why executable stacks are bad in GRUB. When you talk about them, you always start talking about other projects. > > - Everybody is going to disable executable stacks > > I don't think I've said everybody, but I have said that the trend is > towards more OSes doing this. Is this somehow not clearly true. OK. > Off the top of my head, this discussion has been pretty constant for the > last 10 or so years on linux-kernel, and was fairly prominent in the > last year on the mailing lists for binutils, gcc, and glibc. It's also > been a topic of discussion on quite a few other lists, and as far as I'm > aware no other project has had any serious problem with making their > stacks non-executable when there was no technical reason for them to be > executable. Your like of nested functions isn't a technical reason -- > you think it's pretty, and that's pretty much the end of the reasoning. I have already mentioned my technical reasons in a past mail. IIRC, you didn't reply to them. If you don't think they are technical, I don't understand what you think are technical. The question is very similar to "why we use local functions". > You clearly do not. It isn't *at all* about any marketing point of > view. Programs with executable stacks are demonstrably exploited more > than those without, and that includes programs not foreseen to be run in > a way where overruns could result in an exploit. That's the real world, > which you're ignoring. Again, about other projects. I'm not interested in other projects in this discussion. > If I've insulted you, I apologize, for I've had no intent on doing so. > I do, however, continue to recognize that the grub project is ignoring > security concerns. I'm still dismayed over this, because I'd like grub > to continue getting better. And I'm going to continue trying to help > make it so in the foreseeable future, both regarding this problem and > others, even though I understand that some times you'll refuse to take > what I say into account, or make some other choice. You're free to do > so, but insulting me because I mentioned when you've done so is really > pretty petty. I'm just waiting until you start thinking GRUB rather than other projects. My feeling is that you overly extend some cases to the general principle. I know that executable stacks are harmful in some types of projects, in particular network servers, because clients may trigger buffer overrun. But this does not prove that they are harmful in *all* projects. Mathematically speaking, this is not always true, as well as setuid is not always harmful. Also, note that I have never seen any bug report about a security hole in GRUB. The reason is simple; there is no way to execute arbitrary code as another user in GRUB. Correct me if I'm wrong. Okuji ^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2006-01-10 16:16 UTC | newest] Thread overview: 8+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2005-12-23 16:30 Nested Function Patches andre-smith -- strict thread matches above, loose matches on Subject: below -- 2005-12-23 2:53 Andre Smith 2005-12-23 8:33 ` Marco Gerards 2005-12-28 8:08 ` Peter Jones 2006-01-09 15:06 ` Yoshinori K. Okuji 2006-01-09 18:13 ` Peter Jones 2006-01-10 10:17 ` Marco Gerards 2006-01-10 16:14 ` Yoshinori K. Okuji
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.