NULL pointer arithmetic and [[gnu::nonnull]] on <string.h>

[Joseph Myers]

On Tue, 12 Nov 2024, Alejandro Colomar wrote:

> Hi Martin,
> 
> > The main effect so far was that we lost a lot of non-null annotations
> > that do not work anymore..  This is not clearly a security win.
> 
> As far as I can see, the annotations have not been removed in glibc.  Is
> there intention to remove them in the future?  That would be nefarious
> for static analysis.

I don't think we reached a conclusion yet on exactly how to specify 
attributes for the cases that aren't covered by the access attribute.  The 
discussion is at 
<https://inbox.sourceware.org/gcc/8a627f5f-a5e7-5bb1-1f2c-99adb366fac5@redhat.com/T/#u> 
and any comments would best go in that thread.

-- 
Joseph S. Myers
josmyers@redhat.com