a493fe4153
GWP-ASan's recoverable mode was landed upstream in https://reviews.llvm.org/D140173. This mode allows for a use-after-free or a buffer-overflow bug to be detected by GWP-ASan, a crash report dumped, but then GWP-ASan (through the preCrashReport() and postCrashReportRecoverableOnly() hooks) will patch up the memory so that the process can continue, in spite of the memory safety bug. This is desirable, as it allows us to consider migrating non-system apps from opt-in GWP-ASan to opt-out GWP-ASan. The major concern was "if we make it opt-out, then bad apps will start crashing". If we don't crash, problem solved :). Obviously, we'll need to do this with an amount of process sampling to mitigate against the 70KiB memory overhead. The biggest problem is that the debuggerd signal handler isn't the first signal handler for apps, it's the sigchain handler inside of libart. Clearly, the sigchain handler needs to ask us whether the crash is GWP-ASan's fault, and if so, please patch up the allocator. Because of linker namespace restrictions, libart can't directly ask the linker (which is where debuggerd lies), so we provide a proxy function in libc. Test: Build the platform, run sanitizer-status and various test apps with recoverable gwp-asan. Assert that it doesn't crash, and we get a debuggerd report. Bug: 247012630 Change-Id: I86d5e27a9ca5531c8942e62647fd377c3cd36dfd
49 lines
1.2 KiB
Text
49 lines
1.2 KiB
Text
#
|
|
# Copyright (C) 2015 The Android Open Source Project
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
LIBC {
|
|
global:
|
|
android_dlopen_ext; # introduced=21
|
|
dl_iterate_phdr; # introduced-arm=21
|
|
dl_unwind_find_exidx; # arm
|
|
dladdr;
|
|
dlclose;
|
|
dlerror;
|
|
dlopen;
|
|
dlsym;
|
|
local:
|
|
*;
|
|
};
|
|
|
|
LIBC_N {
|
|
global:
|
|
android_get_application_target_sdk_version; # introduced=24 versioned=29
|
|
dlvsym; # introduced=24
|
|
} LIBC;
|
|
|
|
LIBC_OMR1 { # introduced=27
|
|
global:
|
|
__cfi_shadow_size;
|
|
__cfi_slowpath;
|
|
__cfi_slowpath_diag;
|
|
} LIBC_N;
|
|
|
|
LIBC_PLATFORM {
|
|
global:
|
|
android_get_LD_LIBRARY_PATH;
|
|
__cfi_init;
|
|
android_handle_signal;
|
|
} LIBC_OMR1;
|