Comment on Welcome to the Strip Mining Era of OSS SecurityparentComments−Joel_Mckay3moLets be honest, LLM with fuzzers are going to pound any llvm generated binary right in the hubris.Won't matter if is closed source, signed, and or obfuscated. =3−zephen3moDon't think you even need to qualify that with "llvm generated."−Joel_Mckay3moNondeterministic compiled code-motion in llvm means a workaround can't reliably be patched given version permuted bug emergence.Fun times =3−zephen3moIt's certainly possible to write optimizations that generate nondeterministic llvm outputs, but the docs explain conditions when that can happen, and warn against it.
Comments
Lets be honest, LLM with fuzzers are going to pound any llvm generated binary right in the hubris.
Won't matter if is closed source, signed, and or obfuscated. =3
Don't think you even need to qualify that with "llvm generated."
Nondeterministic compiled code-motion in llvm means a workaround can't reliably be patched given version permuted bug emergence.
Fun times =3
It's certainly possible to write optimizations that generate nondeterministic llvm outputs, but the docs explain conditions when that can happen, and warn against it.