[GHC] #10826: [Security] Safe Haskell can be bypassed via annotations

GHC ghc-devs at haskell.org
Fri Sep 4 22:38:20 UTC 2015


#10826: [Security] Safe Haskell can be bypassed via annotations
-------------------------------------+-------------------------------------
        Reporter:  spinda            |                   Owner:
            Type:  bug               |                  Status:  new
        Priority:  highest           |               Milestone:  7.10.3
       Component:  Compiler          |                 Version:  7.10.2
      Resolution:                    |                Keywords:
Operating System:  Unknown/Multiple  |            Architecture:
 Type of failure:  GHC accepts       |  Unknown/Multiple
  invalid program                    |               Test Case:
      Blocked By:                    |                Blocking:
 Related Tickets:                    |  Differential Revisions:
-------------------------------------+-------------------------------------

Comment (by kanetw):

 Not as far as I know. They're only accessible via the GHC API or TH and
 that's unsafe Haskell, never mind that you have to explicitly unhide `ghc`
 for the first way.

 .hi files do have annotations stored, so you could read them with an
 external tool.

--
Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/10826#comment:7>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler


More information about the ghc-tickets mailing list