From: Markus Kuhn <Markus.Kuhn@cl.cam.ac.uk>
Subject: Re: Compiling gnat into gcc-2.8.0
Date: 1998/02/27
Date: 1998-02-27T00:00:00+00:00 [thread overview]
Message-ID: <34F68913.2FF865DA@cl.cam.ac.uk> (raw)
In-Reply-To: 34F5A906.1704@gsfc.nasa.gov
Stephen Leake wrote:
> Another difference between gcc C and GNAT is that gcc C was deliberately
> designed to compile with lots of different C compilers, while GNAT can
> only be compiled with GNAT (not ObjectAda or any other Ada compiler).
Paranoids will point out that this can be seen as a security problem
of gnat as it prevents source code review of the compiler. Read
Ken Thompson's legendary "Reflections on trusting trust" ACM
Turing award lecture if you do not understand why this is so:
http://www1.acm.org:81/classics/sep95/
Markus
--
Markus G. Kuhn, Security Group, Computer Lab, Cambridge University, UK
email: mkuhn at acm.org, home page: <http://www.cl.cam.ac.uk/~mgk25/>
next prev parent reply other threads:[~1998-02-27 0:00 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
1998-02-25 0:00 Compiling gnat into gcc-2.8.0 Kevin Taylor
1998-02-26 0:00 ` Stephen Leake
1998-02-26 0:00 ` Robert Dewar
1998-02-27 0:00 ` Markus Kuhn [this message]
1998-02-27 0:00 ` Robert Dewar
1998-02-27 0:00 ` Andi Kleen
1998-02-27 0:00 ` Larry Kilgallen
1998-02-27 0:00 ` Robert Dewar
1998-02-27 0:00 ` Richard Kenner
1998-03-01 0:00 ` Trusting GNAT for security software Markus Kuhn
1998-03-01 0:00 ` Robert Dewar
1998-03-01 0:00 ` Larry Kilgallen
1998-03-01 0:00 ` Robert Dewar
1998-03-02 0:00 ` Larry Kilgallen
1998-03-02 0:00 ` Andi Kleen
1998-03-02 0:00 ` Larry Kilgallen
1998-02-26 0:00 ` Compiling gnat into gcc-2.8.0 Simon Wright
1998-02-26 0:00 ` Robert Dewar
replies disabled
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox