leandrof/linux
1
0
Fork 0
forked from Minki/linux
Code Issues Pull Requests Packages Projects Releases Wiki Activity

gcc-plugins: Replace HTTP links with HTTPS ones

Browse Source 
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
	  If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
            If both the HTTP and HTTPS versions
            return 200 OK and serve the same content:
              Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Link: https://lore.kernel.org/r/20200713135018.34708-1-grandmaster@al2klimov.de
Signed-off-by: Kees Cook <keescook@chromium.org>
This commit is contained in:
Alexander A. Klimov 2020-07-13 15:50:18 +02:00 committed by Kees Cook
parent 8dd70543f7
commit 496b24ec6d
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
scripts/gcc-plugins/cyc_complexity_plugin.c
View File

@ -5,7 +5,7 @@
* Homepage: * Homepage:
* https://github.com/ephox-gcc-plugins/cyclomatic_complexity * https://github.com/ephox-gcc-plugins/cyclomatic_complexity
* *
* http://en.wikipedia.org/wiki/Cyclomatic_complexity * https://en.wikipedia.org/wiki/Cyclomatic_complexity
* The complexity M is then defined as: * The complexity M is then defined as:
* M = E - N + 2P * M = E - N + 2P
* where * where

2
scripts/gcc-plugins/sancov_plugin.c
View File

@ -11,7 +11,7 @@
* *
* You can read about it more here: * You can read about it more here:
* https://gcc.gnu.org/viewcvs/gcc?limit_changes=0&view=revision&revision=231296 * https://gcc.gnu.org/viewcvs/gcc?limit_changes=0&view=revision&revision=231296
* http://lwn.net/Articles/674854/ * https://lwn.net/Articles/674854/
* https://github.com/google/syzkaller * https://github.com/google/syzkaller
* https://lwn.net/Articles/677764/ * https://lwn.net/Articles/677764/
* *

2
scripts/gcc-plugins/structleak_plugin.c
View File

@ -11,7 +11,7 @@
* otherwise leak kernel stack to userland if they aren't properly initialized * otherwise leak kernel stack to userland if they aren't properly initialized
* by later code * by later code
* *
* Homepage: http://pax.grsecurity.net/ * Homepage: https://pax.grsecurity.net/
* *
* Options: * Options:
* -fplugin-arg-structleak_plugin-disable * -fplugin-arg-structleak_plugin-disable