On Jun 23, 2007, at 2:38 PM, Robert Dewar wrote:
On the contrary, since gcc can always be built using third party C compilers, it would be much easier to smoke out and eliminate any such behavior (indeed this example shows the merit of maintaining the property that gcc can be compiled by non-gcc compilers), although we have not been able to maintain that property for the Ada front end.
Plus, you can audit old binaries to find evidence this had been done by recompiling gcc with 5 different C compiles on 5 systems and then using those to compile up the claimed sources for the binary and see if it matches the binary in question. If you're a system distributor, you limit who can inject binaries into the build system, log and audit it.
