Hacker News new | ask | show | jobs
by dxf 2404 days ago
At Google, we strive to ship a new Clang/LLVM toolchain to our C++ developers every week.

Two of our toolchain engineers gave a talk on this at CppCon. Check it out if you're interested: https://www.youtube.com/watch?v=zh91if43QLM

1 comments

Does this apply to the internal build system as well? As far as I know this issue still has not been addressed in recent Android system images for Pixel devices: https://twitter.com/landaire/status/1152739987869167616
The LLVM issue was addressed in LLVM in https://reviews.llvm.org/D64757 and https://reviews.llvm.org/D64759.

Those haven't been released in Android yet, but they should be in the next quarterly release of Android. My understanding from chatting with the Android team is that though this is a weakened mitigation, it is not an exploit.