]> git.ipfire.org Git - thirdparty/openvpn.git/commit
hardening: add insurance to exit on a failed ASSERT()
authorSteffan Karger <steffan@karger.me>
Wed, 21 Oct 2015 08:08:06 +0000 (10:08 +0200)
committerGert Doering <gert@greenie.muc.de>
Wed, 21 Oct 2015 08:17:42 +0000 (10:17 +0200)
commitd03dd06e59dc98eb2afaaa49cb1f879cab9ce747
tree618cbdd766e783c4c46fe00b944dbedf671bd6ff
parentc72dbb8b470ab7b25fc74e41aed4212db48a9d2f
hardening: add insurance to exit on a failed ASSERT()

The code behind our ASSERT() macro is pretty complex.  Although it seems
to be correct, make it trivially clear we will never return from a failed
assert by adding an _exit(1) call.  As was suggested by Sebastian Krahmer
of the SuSE security team.

To make sure they that tools like clang static analyzer and coverity
understand that assert_failed() will not return, add an
__attribute__((__noreturn__)) annotation.

v2: use __attribute__ instead of inline to convince static analysers.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1445414886-11052-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/10349
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit e8a9e3203bf00605dae000d31095076ae038491c)
src/openvpn/error.c
src/openvpn/error.h