Building with WITH_DEBUG (-g) in make.conf

[Eitan Adler]

On 4 September 2012 17:50, Dimitry Andric <dim at freebsd.org> wrote:
> On 2012-09-04 17:53, Eitan Adler wrote:
>>
>> On 4 September 2012 05:26, Jake Smith <jake at avenue22.net> wrote:
>
> ...
>
>>> It got me thinking, is there any reason why it would be a bad idea to
>>> build
>>> all my ports with debug symbols from now on?
>>
>>
>>> Are there any performance hits
>>
>>
>> Yes. Code size grows and the flags may enable internal
>> debugging in the program itself.
>
>
> There's a difference between just using '-g', which should never change
> the behaviour of the program at runtime, and adding -DDEBUG or similar
> flags on the command line, which may or may not enable extra code, or
> even cause totally different code paths.

My "no" was relating to debug information specifically. Changing the
codepath in any way may open the door to new vulnerabilities. There is
nothing specific to this being a debug option that makes this an
issue. That said, I should have been more precise. :)


-- 
Eitan Adler