[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [MirageOS-devel] OCaml-TLS directly on Xen



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Hi,

thanks for your replies. Moving forward I've some questions; related
is for sure https://github.com/mirage/mirage-platform/pull/102
(installing runtime headers for xen).

C code currently lives in:
 - xen repo, extras/mini-os <- malloc, printf, console, blkfront, ...
(GPL2)
 - mirage-platform repo, xen/runtime/xencaml <- symbols required by
OCaml runtime (which is in runtime/ocaml)
 - OpenLibm <- should that install a math.h header?
 - a nanolibc is proposed for some more symbols (+gmp?)

Which CFLAGS to use for C libraries (such as OCaml runtime etc.)?
 - enable stack protection (FORTIFY_SOURCE)?
 - enable asserts?
 - for sure -fno-builtin

I generally don't trust C code, thus I'd be in favor of enabling both
stack protection and assertions when compiling our unikernels, but am
happy to hear your opinion.


Hannes
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DaQf
-----END PGP SIGNATURE-----

_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.