linux-kernel - Re: -Werror for `make W=0`

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAHk-=whsW9Dh7zCwbct59GOL0CudU+k4C3pa1P1xUxzzSbJoUA@mail.gmail.com>
Date:   Wed, 19 Aug 2020 11:29:15 -0700
From:   Linus Torvalds <torvalds@...ux-foundation.org>
To:     Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
Cc:     Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Arvind Sankar <nivedita@...m.mit.edu>,
        Ard Biesheuvel <ardb@...nel.org>,
        Dmitry Vyukov <dvyukov@...gle.com>,
        Masahiro Yamada <masahiroy@...nel.org>,
        "the arch/x86 maintainers" <x86@...nel.org>,
        David Laight <David.Laight@...lab.com>,
        Nick Desaulniers <ndesaulniers@...gle.com>
Subject: Re: -Werror for `make W=0`

On Wed, Aug 19, 2020 at 2:44 AM Andy Shevchenko
<andriy.shevchenko@...ux.intel.com> wrote:
>
> Maybe silly idea, but would it make sense to enable -Werror for default warning
> level, let's say W=0, at some point?

I'd love to, and would have done that a long time ago, but we just
haven't been able to depend on the compilers not having random
warnings in random versions.

And making it a config option doesn't work well either, simply because
that will just mean that bots will randomly fail if they set that
option, and if we make it harder to set developers won't have it set
anyway, and it doesn't help much.

End result: using -Werror works wonderfully in controlled
environments. Not so wonderfully in the general random mess.

That said, I've been so aggressive against accepting new warnings that
I've considered this unconditionally anyway, and then dealing with
compiler version fallout by just disabling certain compilers and/or
certain options.

But it would almost certainly be pretty painful.

                     Linus