4 ms·

Tiny C compiler (tcc) is really cool. I used it as a test case in my diverse double-compiling (DDC) work to counter the trusting trust attack: http://www.dwhee

Tiny C compiler (tcc) is really cool. I used it as a test case in my diverse double-compiling (DDC) work to counter the trusting trust attack: http://www.dwheeler.com/trusting-trust/ http://www.dwheeler.com/trusting-trust/ There has been some continued development of tcc; the GitHub repository here has changes through April 2016: https://github.com/TinyCC/tinycc https://github.com/TinyCC/tinycc

nickpsecurity 10y ago
Another I found doing research for human-verifiable builds was the LCC compiler. It's specifically designed to be easy to understand despite producing good performance. People that mentioned it said the authors spent around 10 years on it trying to achieve that goal. Full description is in the book they sell to recoup some of that investment. Worth looking into if you hadnt heard of it. https://en.m.wikipedia.org/wiki/LCC_(compiler) https://en.m.wikipedia.org/wiki/LCC_(compiler) Note: It's not FOSS but is free for personal use. Should be fine if used for DDC.
cygx 10y ago
The github repo is just a mirror, development happens on repo.or.cz [1] [1] http://repo.or.cz/tinycc.git http://repo.or.cz/tinycc.git
- kzrdude 10y ago
  Eh what, on the mob branch? Master untouched for three years.
  - cygx 10y ago
    Mob is the main development branch, open to all. Master is the release branch, and as no release has been cut for a couple of years, it is indeed rather stale. edit: If you want to get an idea about what happens in TCC-land, you should check out the mailing list archives [1], eg a recent-ish status update [2]. [1] http://lists.nongnu.org/archive/html/tinycc-devel/ http://lists.nongnu.org/archive/html/tinycc-devel/ [2] http://lists.nongnu.org/archive/html/tinycc-devel/2016-11/msg00032.html http://lists.nongnu.org/archive/html/tinycc-devel/2016-11/ms...

4 ms·

Tiny C compiler (tcc) is really cool. I used it as a test case in my diverse double-compiling (DDC) work to counter the trusting trust attack: http://www.dwhee

by dwheeler 10y ago

nickpsecurity 10y ago
Another I found doing research for human-verifiable builds was the LCC compiler. It's specifically designed to be easy to understand despite producing good performance. People that mentioned it said the authors spent around 10 years on it trying to achieve that goal. Full description is in the book they sell to recoup some of that investment. Worth looking into if you hadnt heard of it. https://en.m.wikipedia.org/wiki/LCC_(compiler) https://en.m.wikipedia.org/wiki/LCC_(compiler) Note: It's not FOSS but is free for personal use. Should be fine if used for DDC.
cygx 10y ago
The github repo is just a mirror, development happens on repo.or.cz [1] [1] http://repo.or.cz/tinycc.git http://repo.or.cz/tinycc.git
- kzrdude 10y ago
  Eh what, on the mob branch? Master untouched for three years.
  - cygx 10y ago
    Mob is the main development branch, open to all. Master is the release branch, and as no release has been cut for a couple of years, it is indeed rather stale. edit: If you want to get an idea about what happens in TCC-land, you should check out the mailing list archives [1], eg a recent-ish status update [2]. [1] http://lists.nongnu.org/archive/html/tinycc-devel/ http://lists.nongnu.org/archive/html/tinycc-devel/ [2] http://lists.nongnu.org/archive/html/tinycc-devel/2016-11/msg00032.html http://lists.nongnu.org/archive/html/tinycc-devel/2016-11/ms...