Unicode security
Thomas Wolff
towo@towo.net
Fri Jan 21 16:52:05 GMT 2022
Am 11.01.2022 um 01:50 schrieb Joseph Myers:
> On Mon, 10 Jan 2022, Paul Koning via Binutils wrote:
>
>> Yikes. So if you use a different text editor than the previous author,
>> or a different compiler, your C code with Unicode identifiers might
>> suddenly get link errors because the same string got encoded a different way.
No, neither editors nor compilers should ever change identifiers (e.g.
by normalization) under the hood, or I'd consider that buggy. So
identifiers will stay as they are and can be matched when linking.
Only if people edit different files with different editors it could
happen that visually equal strings are encoded differently but that's
another issue and can be fixed.
>>
>> This is clearly bad; is there some way for this to be fixed?
> Users should pay attention to compiler warnings (GCC enables
> -Wnormalized=nfc by default).
Which are however just warnings, not transformations.
More information about the Binutils
mailing list