6f4661ce8f
Over the years, the security group has received a decent number of reports of malicious input causing e.g., Clang to crash. While these reports are valuable, it seems useful to clarify that many of them are considered bugs, rather than security issues.
685 B
685 B
Reporting LLVM Security Issues
To report security issues in LLVM, please follow the steps outlined on the LLVM Security Group page.
Security Issue Scope
Many of LLVM's tools are explicitly not considered to be hardened against malicious input. Bugs in LLVM tools like buffer overreads or crashes are valuable to report as Issues, but aren't always seen as security vulnerabilities. Please see our documentation for a more precise definition of a security issue in this repository.