On Tue, May 29, 2018 at 8:48 PM, Jeff Gilbert <jgilb...@mozilla.com> wrote: > It would be sad to see us standardize on a clang monoculture.
I wouldn't want us to abandon msvc and gcc as well-supported compilers; but from just one perspective (security) it would be very advantageous to have a single open source toolchain on all platforms so that security improvements like Control Flow Integrity and other, much newer, techniques coming out of academia are applicable to all platforms immediately. Currently, for Control Flow Integrity we have separate implementations on Mac and Windows (necessitating duplicate effort) and no good option on Linux. For academic vtable protections I'm curious about, they exist as clang plugins and nothing else. -tom _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
