Dan Albert | 4ae5d4b | 2014-10-31 16:23:08 -0700 | [diff] [blame] | 1 | ############################################## |
| 2 | ## Perform configuration steps for sanitizers. |
| 3 | ############################################## |
| 4 | |
Dan Albert | 27ccb75 | 2015-04-16 16:21:02 -0700 | [diff] [blame] | 5 | my_sanitize := $(strip $(LOCAL_SANITIZE)) |
Vishwath Mohan | 8dcfdce | 2017-01-18 17:50:29 -0800 | [diff] [blame] | 6 | my_sanitize_diag := $(strip $(LOCAL_SANITIZE_DIAG)) |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 7 | |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 8 | # SANITIZE_HOST is only in effect if the module is already using clang (host |
| 9 | # modules that haven't set `LOCAL_CLANG := false` and device modules that |
| 10 | # have set `LOCAL_CLANG := true`. |
| 11 | my_global_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 12 | my_global_sanitize_diag := |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 13 | ifeq ($(my_clang),true) |
| 14 | ifdef LOCAL_IS_HOST_MODULE |
| 15 | my_global_sanitize := $(strip $(SANITIZE_HOST)) |
| 16 | |
| 17 | # SANITIZE_HOST=true is a deprecated way to say SANITIZE_HOST=address. |
| 18 | my_global_sanitize := $(subst true,address,$(my_global_sanitize)) |
| 19 | else |
| 20 | my_global_sanitize := $(strip $(SANITIZE_TARGET)) |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 21 | my_global_sanitize_diag := $(strip $(SANITIZE_TARGET_DIAG)) |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 22 | endif |
| 23 | endif |
| 24 | |
Ivan Lozano | b4749cb | 2017-07-21 10:33:32 -0700 | [diff] [blame] | 25 | # Disable global integer_overflow in excluded paths. |
| 26 | ifneq ($(filter integer_overflow, $(my_global_sanitize)),) |
| 27 | combined_exclude_paths := $(INTEGER_OVERFLOW_EXCLUDE_PATHS) \ |
| 28 | $(PRODUCT_INTEGER_OVERFLOW_EXCLUDE_PATHS) |
| 29 | |
| 30 | ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_exclude_paths)),\ |
| 31 | $(filter $(dir)%,$(LOCAL_PATH)))),) |
| 32 | my_global_sanitize := $(filter-out integer_overflow,$(my_global_sanitize)) |
| 33 | my_global_sanitize_diag := $(filter-out integer_overflow,$(my_global_sanitize_diag)) |
| 34 | endif |
| 35 | endif |
| 36 | |
Vishwath Mohan | 23b2d2e | 2017-10-31 02:25:16 -0700 | [diff] [blame] | 37 | # Disable global CFI in excluded paths |
| 38 | ifneq ($(filter cfi, $(my_global_sanitize)),) |
| 39 | combined_exclude_paths := $(CFI_EXCLUDE_PATHS) \ |
| 40 | $(PRODUCT_CFI_EXCLUDE_PATHS) |
| 41 | |
| 42 | ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_exclude_paths)),\ |
| 43 | $(filter $(dir)%,$(LOCAL_PATH)))),) |
| 44 | my_global_sanitize := $(filter-out cfi,$(my_global_sanitize)) |
| 45 | my_global_sanitize_diag := $(filter-out cfi,$(my_global_sanitize_diag)) |
| 46 | endif |
| 47 | endif |
| 48 | |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 49 | ifneq ($(my_global_sanitize),) |
Evgenii Stepanov | 71faa19 | 2016-05-19 17:45:21 -0700 | [diff] [blame] | 50 | my_sanitize := $(my_global_sanitize) $(my_sanitize) |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 51 | endif |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 52 | ifneq ($(my_global_sanitize_diag),) |
| 53 | my_sanitize_diag := $(my_global_sanitize_diag) $(my_sanitize_diag) |
| 54 | endif |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 55 | |
Andreas Gampe | 6b30d77 | 2016-06-27 15:15:31 -0700 | [diff] [blame] | 56 | # The sanitizer specified in the product configuration wins over the previous. |
| 57 | ifneq ($(SANITIZER.$(TARGET_PRODUCT).$(LOCAL_MODULE).CONFIG),) |
| 58 | my_sanitize := $(SANITIZER.$(TARGET_PRODUCT).$(LOCAL_MODULE).CONFIG) |
| 59 | ifeq ($(my_sanitize),never) |
| 60 | my_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 61 | my_sanitize_diag := |
Andreas Gampe | 6b30d77 | 2016-06-27 15:15:31 -0700 | [diff] [blame] | 62 | endif |
| 63 | endif |
| 64 | |
Colin Cross | 2361842 | 2016-11-02 15:05:21 -0700 | [diff] [blame] | 65 | ifndef LOCAL_IS_HOST_MODULE |
| 66 | # Add a filter point for 32-bit vs 64-bit sanitization (to lighten the burden) |
| 67 | SANITIZE_TARGET_ARCH ?= $(TARGET_ARCH) $(TARGET_2ND_ARCH) |
| 68 | ifeq ($(filter $(SANITIZE_TARGET_ARCH),$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),) |
| 69 | my_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 70 | my_sanitize_diag := |
Colin Cross | 2361842 | 2016-11-02 15:05:21 -0700 | [diff] [blame] | 71 | endif |
Andreas Gampe | cd25740 | 2016-06-20 17:36:49 -0700 | [diff] [blame] | 72 | endif |
| 73 | |
Andreas Gampe | 3d3b0c9 | 2016-06-20 17:46:29 -0700 | [diff] [blame] | 74 | # Add a filter point based on module owner (to lighten the burden). The format is a space- or |
| 75 | # colon-separated list of owner names. |
| 76 | ifneq (,$(SANITIZE_NEVER_BY_OWNER)) |
| 77 | ifneq (,$(LOCAL_MODULE_OWNER)) |
| 78 | ifneq (,$(filter $(LOCAL_MODULE_OWNER),$(subst :, ,$(SANITIZE_NEVER_BY_OWNER)))) |
| 79 | $(warning Not sanitizing $(LOCAL_MODULE) based on module owner.) |
| 80 | my_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 81 | my_sanitize_diag := |
Andreas Gampe | 3d3b0c9 | 2016-06-20 17:46:29 -0700 | [diff] [blame] | 82 | endif |
| 83 | endif |
| 84 | endif |
| 85 | |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 86 | # Don't apply sanitizers to NDK code. |
| 87 | ifdef LOCAL_SDK_VERSION |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 88 | my_sanitize := |
Dan Willemsen | f761c0f | 2016-06-28 16:47:43 -0700 | [diff] [blame] | 89 | my_global_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 90 | my_sanitize_diag := |
Dan Albert | 27ccb75 | 2015-04-16 16:21:02 -0700 | [diff] [blame] | 91 | endif |
| 92 | |
Dan Albert | 4c40141 | 2015-08-19 20:13:33 -0700 | [diff] [blame] | 93 | # Never always wins. |
| 94 | ifeq ($(LOCAL_SANITIZE),never) |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 95 | my_sanitize := |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 96 | my_sanitize_diag := |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 97 | endif |
| 98 | |
Vishwath Mohan | 23b2d2e | 2017-10-31 02:25:16 -0700 | [diff] [blame] | 99 | # Enable CFI in included paths. |
| 100 | ifeq ($(filter cfi, $(my_sanitize)),) |
| 101 | combined_include_paths := $(CFI_INCLUDE_PATHS) \ |
| 102 | $(PRODUCT_CFI_INCLUDE_PATHS) |
| 103 | |
| 104 | ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_include_paths)),\ |
| 105 | $(filter $(dir)%,$(LOCAL_PATH)))),) |
| 106 | my_sanitize := cfi $(my_sanitize) |
| 107 | my_sanitize_diag := cfi $(my_sanitize_diag) |
| 108 | endif |
| 109 | endif |
| 110 | |
Vishwath Mohan | 8dcfdce | 2017-01-18 17:50:29 -0800 | [diff] [blame] | 111 | # If CFI is disabled globally, remove it from my_sanitize. |
Vishwath Mohan | 45665b4 | 2017-01-24 13:20:28 -0800 | [diff] [blame] | 112 | ifeq ($(strip $(ENABLE_CFI)),false) |
Vishwath Mohan | 8dcfdce | 2017-01-18 17:50:29 -0800 | [diff] [blame] | 113 | my_sanitize := $(filter-out cfi,$(my_sanitize)) |
| 114 | my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag)) |
| 115 | endif |
| 116 | |
Vishwath Mohan | a204606 | 2017-02-07 20:28:07 -0800 | [diff] [blame] | 117 | # Disable CFI for arm32 (b/35157333). |
| 118 | ifneq ($(filter arm,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),) |
| 119 | my_sanitize := $(filter-out cfi,$(my_sanitize)) |
| 120 | my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag)) |
| 121 | endif |
| 122 | |
Vishwath Mohan | c026f6d | 2017-04-20 07:39:13 -0700 | [diff] [blame] | 123 | # Also disable CFI if ASAN is enabled. |
| 124 | ifneq ($(filter address,$(my_sanitize)),) |
| 125 | my_sanitize := $(filter-out cfi,$(my_sanitize)) |
| 126 | my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag)) |
| 127 | endif |
| 128 | |
Evgenii Stepanov | 8c50e3c | 2017-01-31 17:08:33 -0800 | [diff] [blame] | 129 | # CFI needs gold linker, and mips toolchain does not have one. |
| 130 | ifneq ($(filter mips mips64,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),) |
| 131 | my_sanitize := $(filter-out cfi,$(my_sanitize)) |
| 132 | my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag)) |
| 133 | endif |
| 134 | |
Vishwath Mohan | 96a130b | 2017-11-17 11:19:36 -0800 | [diff] [blame] | 135 | # Disable CFI for host targets |
| 136 | ifdef LOCAL_IS_HOST_MODULE |
| 137 | my_sanitize := $(filter-out cfi,$(my_sanitize)) |
| 138 | my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag)) |
| 139 | endif |
| 140 | |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 141 | # Support for local sanitize blacklist paths. |
| 142 | ifneq ($(my_sanitize)$(my_global_sanitize),) |
| 143 | ifneq ($(LOCAL_SANITIZE_BLACKLIST),) |
| 144 | my_cflags += -fsanitize-blacklist=$(LOCAL_PATH)/$(LOCAL_SANITIZE_BLACKLIST) |
| 145 | endif |
| 146 | endif |
| 147 | |
Ivan Lozano | b4749cb | 2017-07-21 10:33:32 -0700 | [diff] [blame] | 148 | # Disable integer_overflow if LOCAL_NOSANITIZE=integer. |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 149 | ifneq ($(filter integer_overflow, $(my_global_sanitize) $(my_sanitize)),) |
| 150 | ifneq ($(filter integer, $(strip $(LOCAL_NOSANITIZE))),) |
| 151 | my_sanitize := $(filter-out integer_overflow,$(my_sanitize)) |
| 152 | my_sanitize_diag := $(filter-out integer_overflow,$(my_sanitize_diag)) |
| 153 | endif |
| 154 | endif |
| 155 | |
Evgenii Stepanov | 4282366 | 2016-05-12 13:07:17 -0700 | [diff] [blame] | 156 | my_nosanitize = $(strip $(LOCAL_NOSANITIZE)) |
| 157 | ifneq ($(my_nosanitize),) |
| 158 | my_sanitize := $(filter-out $(my_nosanitize),$(my_sanitize)) |
| 159 | endif |
| 160 | |
Dan Albert | a6311b7 | 2015-07-30 10:17:33 -0700 | [diff] [blame] | 161 | # TSAN is not supported on 32-bit architectures. For non-multilib cases, make |
| 162 | # its use an error. For multilib cases, don't use it for the 32-bit case. |
| 163 | ifneq ($(filter thread,$(my_sanitize)),) |
| 164 | ifeq ($(my_32_64_bit_suffix),32) |
| 165 | ifeq ($(my_module_multilib),both) |
| 166 | my_sanitize := $(filter-out thread,$(my_sanitize)) |
| 167 | else |
| 168 | $(error $(LOCAL_PATH): $(LOCAL_MODULE): TSAN cannot be used for 32-bit modules.) |
| 169 | endif |
Yabin Cui | e77c32e | 2017-10-19 14:33:58 -0700 | [diff] [blame] | 170 | else |
| 171 | my_shared_libraries += $(TSAN_RUNTIME_LIBRARY) |
Dan Albert | a6311b7 | 2015-07-30 10:17:33 -0700 | [diff] [blame] | 172 | endif |
| 173 | endif |
| 174 | |
Evgenii Stepanov | 7dcb8b8 | 2016-05-06 18:15:57 -0700 | [diff] [blame] | 175 | ifneq ($(filter safe-stack,$(my_sanitize)),) |
| 176 | ifeq ($(my_32_64_bit_suffix),32) |
| 177 | my_sanitize := $(filter-out safe-stack,$(my_sanitize)) |
| 178 | endif |
| 179 | endif |
| 180 | |
Evgenii Stepanov | 5adfcb1 | 2015-06-25 16:38:25 -0700 | [diff] [blame] | 181 | # Undefined symbols can occur if a non-sanitized library links |
| 182 | # sanitized static libraries. That's OK, because the executable |
| 183 | # always depends on the ASan runtime library, which defines these |
| 184 | # symbols. |
Evgenii Stepanov | 912b51f | 2016-05-19 17:49:51 -0700 | [diff] [blame] | 185 | ifneq ($(filter address thread,$(strip $(SANITIZE_TARGET))),) |
Evgenii Stepanov | 5adfcb1 | 2015-06-25 16:38:25 -0700 | [diff] [blame] | 186 | ifndef LOCAL_IS_HOST_MODULE |
| 187 | ifeq ($(LOCAL_MODULE_CLASS),SHARED_LIBRARIES) |
| 188 | ifeq ($(my_sanitize),) |
| 189 | my_allow_undefined_symbols := true |
| 190 | endif |
| 191 | endif |
| 192 | endif |
| 193 | endif |
| 194 | |
Dan Albert | 94b5791 | 2015-04-17 09:48:33 -0700 | [diff] [blame] | 195 | # Sanitizers can only be used with clang. |
| 196 | ifneq ($(my_clang),true) |
| 197 | ifneq ($(my_sanitize),) |
| 198 | $(error $(LOCAL_PATH): $(LOCAL_MODULE): Use of sanitizers requires LOCAL_CLANG := true) |
| 199 | endif |
| 200 | endif |
| 201 | |
Dan Albert | b5b2ffe | 2015-04-16 18:07:07 -0700 | [diff] [blame] | 202 | ifneq ($(filter default-ub,$(my_sanitize)),) |
| 203 | my_sanitize := $(CLANG_DEFAULT_UB_CHECKS) |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 204 | endif |
| 205 | |
Ivan Krasin | 74b32b8 | 2015-09-18 11:54:43 -0700 | [diff] [blame] | 206 | ifneq ($(filter coverage,$(my_sanitize)),) |
| 207 | ifeq ($(filter address,$(my_sanitize)),) |
| 208 | $(error $(LOCAL_PATH): $(LOCAL_MODULE): Use of 'coverage' also requires 'address') |
| 209 | endif |
Zach Riggle | be0811f | 2017-08-21 17:07:42 -0400 | [diff] [blame] | 210 | my_cflags += -fsanitize-coverage=trace-pc-guard,indirect-calls,trace-cmp |
Ivan Krasin | 74b32b8 | 2015-09-18 11:54:43 -0700 | [diff] [blame] | 211 | my_sanitize := $(filter-out coverage,$(my_sanitize)) |
| 212 | endif |
| 213 | |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 214 | ifneq ($(filter integer_overflow,$(my_sanitize)),) |
| 215 | ifneq ($(filter SHARED_LIBRARIES EXECUTABLES,$(LOCAL_MODULE_CLASS)),) |
| 216 | ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true) |
| 217 | |
| 218 | # Respect LOCAL_NOSANITIZE for integer-overflow flags. |
| 219 | ifeq ($(filter signed-integer-overflow, $(strip $(LOCAL_NOSANITIZE))),) |
| 220 | my_cflags += -fsanitize=signed-integer-overflow |
| 221 | endif |
| 222 | ifeq ($(filter unsigned-integer-overflow, $(strip $(LOCAL_NOSANITIZE))),) |
| 223 | my_cflags += -fsanitize=unsigned-integer-overflow |
| 224 | endif |
| 225 | my_cflags += -fsanitize-trap=all |
| 226 | my_cflags += -ftrap-function=abort |
| 227 | my_cflags += $(INTEGER_OVERFLOW_EXTRA_CFLAGS) |
| 228 | |
Ivan Lozano | c5ef21f | 2018-01-20 01:44:11 +0000 | [diff] [blame] | 229 | # Check for diagnostics mode (on by default). |
Ivan Lozano | 4a36373 | 2017-06-28 09:11:26 -0700 | [diff] [blame] | 230 | ifneq ($(filter integer_overflow,$(my_sanitize_diag)),) |
| 231 | my_cflags += -fno-sanitize-trap=signed-integer-overflow,unsigned-integer-overflow |
| 232 | my_shared_libraries := $($(LOCAL_2ND_ARCH_VAR_PREFIX)UBSAN_RUNTIME_LIBRARY) $(my_shared_libraries) |
| 233 | endif |
| 234 | endif |
| 235 | endif |
| 236 | my_sanitize := $(filter-out integer_overflow,$(my_sanitize)) |
| 237 | endif |
| 238 | |
| 239 | # Makes sure integer_overflow diagnostics is removed from the diagnostics list |
| 240 | # even if integer_overflow is not set for some reason. |
| 241 | ifneq ($(filter integer_overflow,$(my_sanitize_diag)),) |
| 242 | my_sanitize_diag := $(filter-out integer_overflow,$(my_sanitize_diag)) |
| 243 | endif |
| 244 | |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 245 | ifneq ($(my_sanitize),) |
Stephen Hines | e8119e9 | 2015-11-09 16:32:11 -0800 | [diff] [blame] | 246 | fsanitize_arg := $(subst $(space),$(comma),$(my_sanitize)) |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 247 | my_cflags += -fsanitize=$(fsanitize_arg) |
| 248 | |
| 249 | ifdef LOCAL_IS_HOST_MODULE |
Dan Albert | abf4bc9 | 2015-06-16 23:27:34 -0700 | [diff] [blame] | 250 | my_cflags += -fno-sanitize-recover=all |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 251 | my_ldflags += -fsanitize=$(fsanitize_arg) |
Dan Albert | abf4bc9 | 2015-06-16 23:27:34 -0700 | [diff] [blame] | 252 | else |
Evgenii Stepanov | 71faa19 | 2016-05-19 17:45:21 -0700 | [diff] [blame] | 253 | my_cflags += -fsanitize-trap=all |
| 254 | my_cflags += -ftrap-function=abort |
Evgenii Stepanov | 55f73e6 | 2016-05-12 13:07:36 -0700 | [diff] [blame] | 255 | ifneq ($(filter address thread,$(my_sanitize)),) |
Evgenii Stepanov | 71faa19 | 2016-05-19 17:45:21 -0700 | [diff] [blame] | 256 | my_cflags += -fno-sanitize-trap=address,thread |
Evgenii Stepanov | 55f73e6 | 2016-05-12 13:07:36 -0700 | [diff] [blame] | 257 | my_shared_libraries += libdl |
| 258 | endif |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 259 | endif |
| 260 | endif |
| 261 | |
Evgenii Stepanov | 202c7a7 | 2016-07-07 10:56:39 -0700 | [diff] [blame] | 262 | ifneq ($(filter cfi,$(my_sanitize)),) |
Evgenii Stepanov | 81bea1b | 2017-01-20 14:12:08 -0800 | [diff] [blame] | 263 | # __cfi_check needs to be built as Thumb (see the code in linker_cfi.cpp). |
| 264 | # LLVM is not set up to do this on a function basis, so force Thumb on the |
| 265 | # entire module. |
| 266 | LOCAL_ARM_MODE := thumb |
Vishwath Mohan | 5b69c06 | 2017-02-14 07:55:37 -0800 | [diff] [blame] | 267 | my_cflags += $(CFI_EXTRA_CFLAGS) |
Vishwath Mohan | 85f7244 | 2017-11-01 09:21:20 +0000 | [diff] [blame] | 268 | # Only append the default visibility flag if -fvisibility has not already been |
| 269 | # set to hidden. |
| 270 | ifeq ($(filter -fvisibility=hidden,$(LOCAL_CFLAGS)),) |
| 271 | my_cflags += -fvisibility=default |
| 272 | endif |
Vishwath Mohan | 5b69c06 | 2017-02-14 07:55:37 -0800 | [diff] [blame] | 273 | my_ldflags += $(CFI_EXTRA_LDFLAGS) |
Evgenii Stepanov | e1b96f3 | 2017-01-23 16:57:38 -0800 | [diff] [blame] | 274 | my_arflags += --plugin $(LLVM_PREBUILTS_PATH)/../lib64/LLVMgold.so |
Vishwath Mohan | 85f7244 | 2017-11-01 09:21:20 +0000 | [diff] [blame] | 275 | |
| 276 | ifeq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true) |
| 277 | my_ldflags := $(filter-out -fsanitize-cfi-cross-dso,$(my_ldflags)) |
| 278 | my_cflags := $(filter-out -fsanitize-cfi-cross-dso,$(my_cflags)) |
| 279 | else |
| 280 | # Apply the version script to non-static executables |
| 281 | my_ldflags += -Wl,--version-script,build/soong/cc/config/cfi_exports.map |
| 282 | LOCAL_ADDITIONAL_DEPENDENCIES += build/soong/cc/config/cfi_exports.map |
| 283 | endif |
Evgenii Stepanov | 202c7a7 | 2016-07-07 10:56:39 -0700 | [diff] [blame] | 284 | endif |
| 285 | |
Chih-Hung Hsieh | ad741e6 | 2016-03-09 14:54:55 -0800 | [diff] [blame] | 286 | # If local or global modules need ASAN, add linker flags. |
| 287 | ifneq ($(filter address,$(my_global_sanitize) $(my_sanitize)),) |
Dan Albert | 4ae5d4b | 2014-10-31 16:23:08 -0700 | [diff] [blame] | 288 | my_ldflags += $(ADDRESS_SANITIZER_CONFIG_EXTRA_LDFLAGS) |
| 289 | ifdef LOCAL_IS_HOST_MODULE |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 290 | # -nodefaultlibs (provided with libc++) prevents the driver from linking |
| 291 | # libraries needed with -fsanitize=address. http://b/18650275 (WAI) |
Dan Albert | 1f0d530 | 2015-04-28 14:55:50 -0700 | [diff] [blame] | 292 | my_ldflags += -Wl,--no-as-needed |
Dan Albert | 4ae5d4b | 2014-10-31 16:23:08 -0700 | [diff] [blame] | 293 | else |
Chih-Hung Hsieh | ad741e6 | 2016-03-09 14:54:55 -0800 | [diff] [blame] | 294 | # Add asan libraries unless LOCAL_MODULE is the asan library. |
Evgenii Stepanov | f0b15e1 | 2015-04-24 16:34:47 -0700 | [diff] [blame] | 295 | # ASan runtime library must be the first in the link order. |
Chih-Hung Hsieh | ad741e6 | 2016-03-09 14:54:55 -0800 | [diff] [blame] | 296 | ifeq (,$(filter $(LOCAL_MODULE),$($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_RUNTIME_LIBRARY))) |
| 297 | my_shared_libraries := $($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_RUNTIME_LIBRARY) \ |
| 298 | $(my_shared_libraries) |
| 299 | endif |
| 300 | ifeq (,$(filter $(LOCAL_MODULE),$(ADDRESS_SANITIZER_CONFIG_EXTRA_STATIC_LIBRARIES))) |
| 301 | my_static_libraries += $(ADDRESS_SANITIZER_CONFIG_EXTRA_STATIC_LIBRARIES) |
| 302 | endif |
| 303 | |
| 304 | # Do not add unnecessary dependency in shared libraries. |
| 305 | ifeq ($(LOCAL_MODULE_CLASS),SHARED_LIBRARIES) |
| 306 | my_ldflags += -Wl,--as-needed |
| 307 | endif |
Ying Wang | a05e222 | 2015-08-17 16:13:24 -0700 | [diff] [blame] | 308 | |
Colin Cross | d08699e | 2016-07-17 15:28:07 -0700 | [diff] [blame] | 309 | ifeq ($(LOCAL_MODULE_CLASS),EXECUTABLES) |
| 310 | ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true) |
| 311 | my_linker := $($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_LINKER) |
| 312 | # Make sure linker_asan get installed. |
| 313 | $(LOCAL_INSTALLED_MODULE) : | $(PRODUCT_OUT)$($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_LINKER) |
| 314 | endif |
| 315 | endif |
Dan Albert | 08cca28 | 2014-12-11 18:56:26 -0800 | [diff] [blame] | 316 | endif |
| 317 | endif |
| 318 | |
Chih-Hung Hsieh | ad741e6 | 2016-03-09 14:54:55 -0800 | [diff] [blame] | 319 | # If local module needs ASAN, add compiler flags. |
| 320 | ifneq ($(filter address,$(my_sanitize)),) |
| 321 | # Frame pointer based unwinder in ASan requires ARM frame setup. |
| 322 | LOCAL_ARM_MODE := arm |
| 323 | my_cflags += $(ADDRESS_SANITIZER_CONFIG_EXTRA_CFLAGS) |
| 324 | ifndef LOCAL_IS_HOST_MODULE |
| 325 | my_cflags += -mllvm -asan-globals=0 |
| 326 | endif |
| 327 | endif |
| 328 | |
Dan Albert | 9f17655 | 2015-04-28 11:26:45 -0700 | [diff] [blame] | 329 | ifneq ($(strip $(LOCAL_SANITIZE_RECOVER)),) |
| 330 | recover_arg := $(subst $(space),$(comma),$(LOCAL_SANITIZE_RECOVER)), |
Dan Albert | 4111d48 | 2015-04-16 18:08:44 -0700 | [diff] [blame] | 331 | my_cflags += -fsanitize-recover=$(recover_arg) |
| 332 | endif |
Evgenii Stepanov | 202c7a7 | 2016-07-07 10:56:39 -0700 | [diff] [blame] | 333 | |
Vishwath Mohan | 8dcfdce | 2017-01-18 17:50:29 -0800 | [diff] [blame] | 334 | ifneq ($(my_sanitize_diag),) |
Vishwath Mohan | 85f7244 | 2017-11-01 09:21:20 +0000 | [diff] [blame] | 335 | # TODO(vishwath): Add diagnostic support for static executables once |
| 336 | # we switch to clang-4393122 (which adds the static ubsan runtime |
| 337 | # that this depends on) |
| 338 | ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true) |
| 339 | notrap_arg := $(subst $(space),$(comma),$(my_sanitize_diag)), |
| 340 | my_cflags += -fno-sanitize-trap=$(notrap_arg) |
| 341 | # Diagnostic requires a runtime library, unless ASan or TSan are also enabled. |
| 342 | ifeq ($(filter address thread,$(my_sanitize)),) |
| 343 | # Does not have to be the first DT_NEEDED unlike ASan. |
| 344 | my_shared_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)UBSAN_RUNTIME_LIBRARY) |
| 345 | endif |
Evgenii Stepanov | 202c7a7 | 2016-07-07 10:56:39 -0700 | [diff] [blame] | 346 | endif |
| 347 | endif |