Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: David Brown <david.brown@hesbynett.no>
Newsgroups: comp.arch.embedded
Subject: Re: 32 bits time_t and Y2038 issue
Date: Sat, 22 Mar 2025 18:02:56 +0100
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <vrmqg0$a537$3@dont-email.me>
References: <vqpkf9$1sbsa$1@dont-email.me> <vqpoi3$226ih$1@dont-email.me>
 <slrnvtbaot.sal.news-1513678000@a-tuin.ms.intern>
 <vrbado$2133a$1@dont-email.me> <vrbi79$2a30t$1@dont-email.me>
 <slrnvtjeq9.566.news-1513678000@a-tuin.ms.intern>
 <vrcidh$35fbp$2@dont-email.me> <vrjrm9$2ehre$1@paganini.bofh.team>
 <vrk1i7$1qjnk$1@dont-email.me> <vrmmls$2nts5$1@paganini.bofh.team>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 22 Mar 2025 18:02:57 +0100 (CET)
Injection-Info: dont-email.me; posting-host="7638945e773161e15f919c68c89e04e1";
	logging-data="332903"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/tUHK3iu31G8K8IF4YDfRNM//HMt6c3Zs="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:qaAuzQaRp3BTdAj0+YgpmO46LM4=
In-Reply-To: <vrmmls$2nts5$1@paganini.bofh.team>
Content-Language: en-GB
Bytes: 2394

On 22/03/2025 16:57, Waldek Hebisch wrote:
> David Brown <david.brown@hesbynett.no> wrote:

>> A simple rule of "all files are in the project" is more amenable to audit.
> 
> Maybe your wildcard use is very simple, 

My wildcards are often recursive, and cover different kinds of files, so 
they are not entirely simple.  (That also makes it easier to re-use 
virtually the same makefiles in different projects.)

> but year ago wildcards
> were important part in obfuscationg presence of maliciuous code
> in lzma.

I admit I have been thinking primarily about work projects where commit 
access is only from a few people.  If there are malicious actors 
involved, then probably any way to organise files and projects can be 
abused.

> 
> But more important part is keeping info together, inside Makefile.
> 

Agreed.  That is a lot more important than whether the list of files in 
the build is generated from a wildcard pattern specified in the 
makefile, or from a manual list of files in the makefile.