riscv-gnu-toolchain/gcc.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2024-01-09	SECURITY.txt: Drop "exploitable" in reference to hardening issues	Siddhesh Poyarekar	1	-4/+4
	The "exploitable vulnerability" may lead to a misunderstanding that missed hardening issues are considered vulnerabilities, just that they're not exploitable. This is not true, since while hardening bugs may be security-relevant, the absence of hardening does not make a program any more vulnerable to exploits than without. Drop the "exploitable" word to make it clear that missed hardening is not considered a vulnerability. Signed-off-by: Siddhesh Poyarekar <siddhesh@gotplt.org> ChangeLog: * SECURITY.txt: Drop "exploitable" in the hardening section.
2023-10-05	secpol: consistent indentation	Jan Engelhardt	1	-16/+16
	86% of the document have 4 spaces; adjust the remaining 14%. Signed-off-by: Jan Engelhardt <jengelh@inai.de> ChangeLog: * SECURITY.txt: Fix up indentation.
2023-10-05	secpol: add grammatically missing commas / remove one excess instance	Jan Engelhardt	1	-8/+8
	Signed-off-by: Jan Engelhardt <jengelh@inai.de> ChangeLog: * SECURITY.txt: Fix up commas.
2023-10-04	Add a GCC Security policy	Siddhesh Poyarekar	1	-0/+205
	Define a security process and exclusions to security issues for GCC and all components it ships. Signed-off-by: Siddhesh Poyarekar <siddhesh@gotplt.org> ChangeLog: * SECURITY.txt: New file.