GCC Newspaper
OCTOBER 6, 2026
Date
/
Architectures
Components
Topics
News & Policy
Other
Lesson of the Week Week of Sep 21–27

The Allocation That Succeeds Too Well: Overflow Checking in Aligned operator new

Rounding a size up to the alignment is two lines of arithmetic. In libstdc++'s aligned operator new, those two lines could turn a SIZE_MAX request into a successful 32-byte allocation.

The idea An allocator's size argument is attacker-reachable arithmetic. Any rounding, padding, or header adjustment performed before the call must be overflow-checked, or a huge request silently becomes a tiny successful allocation.
  • libstdc++-v3/libsupc++/new_opa.cc
  • libstdc++-v3/libsupc++/new_opa.cc
  • libstdc++-v3/libsupc++/new_opa.cc
  • libstdc++-v3/libsupc++/new_opa.cc
Read the lesson ›
Previous Lessons

Active Discussions

141 discussions
gcc
Proposed

Llvm is having an anonymous maintainer survey

Andrew Pinski suggests GCC could benefit from an anonymous maintainer survey, similar to one being considered by LLVM.

gcc
Proposed

GSoC / OpenACC work report

Student reports on progress for OpenACC directives support and bind() clause implementation.

gcc
Proposed

A quick thought about your website

Sebastian Munda offers to share suggestions for improving the GCC website's presentation and user experience.

gcc
Proposed

I got this call on Monday....

Diego Moreno describes a business inquiry about providing Perl development services to a company with stretched resources.

gcc
Proposed

opt.urls moving target

Buildbot configuration errors indicate the 'opt.urls' file target is unstable.

gcc
6 / 10 Under Review

Automating patch pushes to trunk via the bot

RFC to enable a bot to automatically merge approved patches to the GCC trunk, inspired by OpenJDK's Skara bot.

gcc
Ready to Land

libsanitizer sync needed for DEC Alpha support

Matt Turner has updated libsanitizer for DEC Alpha support and is seeking a maintainer to integrate it into GCC.

gcc
Committed

GCC 13.5 Released

GCC 13.5, a bug-fix release with over 265 fixes, is now available and marks the final release from the GCC 13 branch.

gcc
Proposed

Website Strategy Review

Proposes a personalized website strategy report covering visibility, performance, and improvement plans.

gcc
Proposed

PR126964 Middle-end improvement

A patch for middle-end performance improvement is available but not committed.

gcc
Proposed

MIPIM 2026 Data List

Attendee database for MIPIM 2026 conference available.

gcc
Proposed

Libgomp optimizations for scheduler-guided OpenMP execution

Roy Fru reports progress on optimizing libgomp for cloud VMs by replacing read operations with mmap, adopting USDT probes, and testing with NPB benchmarks.

gcc
5 / 10 Proposed

Website redesign recommendation for GNU

Roshaan Faisal proposes a complete redesign of the GCC website to improve navigation, accessibility, and user experience, especially on mobile devices.

gcc
Proposed

GNU Tools Weekly News Week 52 (August 23, 2026)

Weekly news digest for GNU Tools, covering release updates, conference reminders, general news, and GCC commits.

gcc
Proposed

GSoC OpenACC work report

GSoC student reports progress on OpenACC directives, facing minor C++ frontend issues.

gcc
Proposed

Anubis check stuck?

Sourceware's Anubis proof-of-work system is facing persistent scraper attacks, leading to rate limiting and slow performance.

gcc
Proposed

Anubis check stuck?

Users report persistent 429 Too Many Requests errors on sourceware.org, potentially due to a new nginx rate limiter.

gcc
Proposed

A new proposal has been received

A new proposal has been received for review and signature.

gcc
Proposed

gitweb broken?

Web interface performance issues persist for Georg-Johann Lay, although general site access seems normal.

gcc
Proposed

Donation offer

An unsolicited email offers a large sum of money as a donation to an unspecified recipient.

gcc
Proposed

GCC 16.2 Released

GCC 16.2, a bug-fix release, is now available.

gcc
5 / 10 Proposed

Anubis check stuck?

Users are experiencing delays when accessing GCC websites, possibly due to issues with the Anubis bot check.

gcc
5 / 10 Proposed

GCC AI Policy Announcement

Developer questions the definition and implications of AI-assisted code for GPL-licensed software.

gcc
Proposed

Rust Drop trait support in gccrs - Status Report 5

GSoC student reports progress on implementing Rust's Drop trait in GCC's Rust frontend, focusing on scope alignment and BIR analysis.

gcc
Proposed

Compiler assistance for C++ exception safety

Discusses GCC options for exception handling, clarifying their scope and limitations for porting codebases.

gcc
Proposed

Discourage personal branches in the main GCC repository

Discussion on discouraging or disallowing personal branches in the main GCC repository due to recurring push hook issues.

gcc
Proposed

Gradual 'tree' typing and C++

Discussion on C++ template syntax for GCC's internal 'tree' types and its impact on code readability.

gcc
Proposed

Gradual 'tree' typing and C++

Concerns raised about the syntax and verbosity of gradual typing proposals for GCC's internal tree representation.

gcc
Proposed

Validation for an approach to PR115367

Proposes improving libgomp's OMP_DYNAMIC thread spawning by memoizing load average and optimizing when it's fetched.

gcc
Proposed

DWZ 0.17 released

DWZ, a tool for optimizing DWARF debugging information, has released version 0.17, adding support for compressed debug sections.

gcc
Proposed

Proposal

An unsolicited SEO recommendation for the GCC website.

gcc
Proposed

Proposed updates to the gcc forge repositories

A reviewer expresses concern that renaming a repository from 'gcc-TEST' to 'gcc' could be confusing.

gcc
7 / 10 Proposed

Draft C2Y _BitInt related proposals

Proposes additions to C2Y for _BitInt I/O support in printf/scanf and stdbit.h.

gsoc
Proposed

GSoC: possible IPA-ICF project direction

Proposal for a GSoC project to inventory and improve ICF's equivalence checks for function merging, especially for template instantiations.

rfc
Proposed

Standalone AutoFDO Profile Tool for GCC

Proposal for a standalone AutoFDO profile tool, seeking feedback on perf data parsing and potential library reuse.

libsanitizer
Ready to Land

libsanitizer sync needed for DEC Alpha support

Seeking assistance to sync DEC Alpha support for libsanitizer from LLVM to GCC in time for the GCC 17 release.

rust
Proposed

Rust: Compiling the alloc crate - Status Report 6

Enes Cevik successfully concludes the GSoC project on compiling the Rust alloc crate with GCCRS, having implemented CoerceUnsized support and test suites.

rust
Proposed

Rust: Compiling the alloc crate - Status Report 4

Developer reports progress on compiling Rust's alloc crate with GCCRS, completing the testsuite and identifying missing language items.

gcc/omp
Proposed

libgomp Optimizations for Cloud VMs

Progress report on libgomp optimizations for OpenMP execution in cloud VMs, involving eBPF, IVSHMEM, and new environment variables for scheduler guidance.

gcc/debug
Proposed

RFC: Exclude -fplugin options from DW_AT_producer

Proposes excluding absolute plugin paths from DW_AT_producer debug metadata to improve build reproducibility.

analyzer
Proposed

Follow-up on analyzer strnlen model patch

Developer follows up on a v2 patch for modeling strnlen in the GCC analyzer and expresses interest in further contributions.

gcc-17-2325-g4302e16581b4
Proposed

gcc-17-2325-g4302e16581b4: 10 regressions on arm

A commit adding testcases for trapping math with comparisons caused regressions on ARM due to an interaction with -ffast-math.