News for hackers. Stuff that matters.

A comment on Ccache – a fast C/C++ compiler cache. Parent comment

Re:Ccache – a fast C/C++ compiler cache by account42 on Thursday November 24, 2022 @08:45AM (#33731212)
The threat is not that the cache contains builds of untrusted code but that it contains builds that do not match the code that they are associated with.
[ Parent | on HN ]
Re:Ccache – a fast C/C++ compiler cache by Tobu on Thursday November 24, 2022 @11:19AM (#33733041)
As far as I'm aware (ICEs…) compilers aren't hardened against untrusted code, and a sufficiently capable exploit could be used to poison the cache.
[ Parent | on HN ]
Re:Ccache – a fast C/C++ compiler cache by jonstewart on Thursday November 24, 2022 @11:31AM (#33733177)
ccache uses cryptographic hashing of file contents, in addition to matching compiler arguments, so you can be sure that the code matches.
[ Parent | on HN ]
Re:Ccache – a fast C/C++ compiler cache by slavik81 on Thursday November 24, 2022 @01:56PM (#33734992)
It uses a cryptographic hash of the _inputs_ to the compiler, but there is no way to verify that the cached artifact matches the _output_ of the compiler without actually compiling it yourself.
[ Parent | on HN ]