]> git.ipfire.org Git - thirdparty/openvpn.git/commit
hardening: add insurance to exit on a failed ASSERT()
authorSteffan Karger <steffan@karger.me>
Wed, 21 Oct 2015 08:08:06 +0000 (10:08 +0200)
committerGert Doering <gert@greenie.muc.de>
Wed, 21 Oct 2015 08:14:05 +0000 (10:14 +0200)
commite8a9e3203bf00605dae000d31095076ae038491c
treeda880055a5a9595f331a5f1bca9dbcd7e3c24c21
parentc345ffb34c48a8df8d2728303864d5e1884c00f0
hardening: add insurance to exit on a failed ASSERT()

The code behind our ASSERT() macro is pretty complex.  Although it seems
to be correct, make it trivially clear we will never return from a failed
assert by adding an _exit(1) call.  As was suggested by Sebastian Krahmer
of the SuSE security team.

To make sure they that tools like clang static analyzer and coverity
understand that assert_failed() will not return, add an
__attribute__((__noreturn__)) annotation.

v2: use __attribute__ instead of inline to convince static analysers.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1445414886-11052-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/10349
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/error.c
src/openvpn/error.h