News for hackers. Stuff that matters.
Re:HermiTux: A Binary-Compatible Unikernel by gmueckl on Sunday April 07, 2019 @09:57AM (#19596782)
It is easy to write a function, that makes a syscall directly and not via well known paths in the libc or similar. And then the syscall number can be a variable instead of constant and determining that value statically means solving the halting problem. Q.e.d.
Re:HermiTux: A Binary-Compatible Unikernel by sanxiyn on Sunday April 07, 2019 @12:56PM (#19598111)
Since conservative approximation is still useful, halting problem doesn't matter.

That is, let's say syscall 1 is definitely used, syscall 2 is definitely not used, whether syscall 3 is used depends on halting problem. Including only 1 and 3 to unikernel is safe and better than including all of 1, 2, 3.

Re:HermiTux: A Binary-Compatible Unikernel by gmueckl on Sunday April 07, 2019 @02:09PM (#19598663)
This works in trivial problems. Any moderately sized program I can imagine right now will result in an analysis that is equivalent to "this uses everything"