On Fri, May 12, 2017 at 01:39:18PM -0400, Mark H Weaver wrote: > One thing we could do is add a phase to certain build systems, which > would try to use additional methods to detect these hidden references, > and deliberately cause the build to fail in that case, raising the alarm > that grafting would silently fail.
It's a good idea, and worth doing. I do think we will always find new types of obfuscated references, unfortunately, but we should try to address the types we know about.