llvm

  1. CVE-2024-31852: LLVM ARM Miscompilation and Azure Attestations

    The discovery that LLVM’s ARM backend could generate code that overwrites the Link Register (LR) without saving it to the stack — tracked as CVE‑2024‑31852 — is a sober reminder that compiler toolchains can introduce subtle, hard‑to‑detect integrity failures into otherwise secure software, and...