I've been wondering how compilers like GCC compile after each release, but that made me think:
Are compilers safe?
Correct me if I'm wrong, but even if one version of the compiler with some malicious code was compiled in one step along the way, it would not be infected after that? This would trigger a chain reaction and possibly infect millions of devices.
Has that happened already? If so, how did we find that out?
Is there a group or organization that makes sure that does not happen?