Revert "Build system changes for CFI (Soong)"
This reverts commit d4b484b070
.
Rationale: second in group of commits that left aosp_x86_64 not
building. (See https://android-build.googleplex.com/builds/
submitted/4426589/aosp_x86_64-eng/latest/logs/build_error.log)
Bug: 30227045
Test: builds
Change-Id: I38ab5284c614d6ee68e7359219bd75c7d50131be
This commit is contained in:
parent
da11d7422f
commit
33c252c2f1
5 changed files with 26 additions and 114 deletions
|
@ -86,11 +86,6 @@ func (c *Module) AndroidMk() android.AndroidMkData {
|
||||||
c.subAndroidMk(&ret, c.linker)
|
c.subAndroidMk(&ret, c.linker)
|
||||||
if c.sanitize != nil {
|
if c.sanitize != nil {
|
||||||
c.subAndroidMk(&ret, c.sanitize)
|
c.subAndroidMk(&ret, c.sanitize)
|
||||||
if Bool(c.sanitize.Properties.Sanitize.Cfi) {
|
|
||||||
ret.SubName += ".cfi"
|
|
||||||
} else if Bool(c.sanitize.Properties.Sanitize.Address) {
|
|
||||||
ret.SubName += ".asan"
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
c.subAndroidMk(&ret, c.installer)
|
c.subAndroidMk(&ret, c.installer)
|
||||||
|
|
||||||
|
|
19
cc/cc.go
19
cc/cc.go
|
@ -46,9 +46,6 @@ func init() {
|
||||||
ctx.TopDown("asan_deps", sanitizerDepsMutator(asan))
|
ctx.TopDown("asan_deps", sanitizerDepsMutator(asan))
|
||||||
ctx.BottomUp("asan", sanitizerMutator(asan)).Parallel()
|
ctx.BottomUp("asan", sanitizerMutator(asan)).Parallel()
|
||||||
|
|
||||||
ctx.TopDown("cfi_deps", sanitizerDepsMutator(cfi))
|
|
||||||
ctx.BottomUp("cfi", sanitizerMutator(cfi)).Parallel()
|
|
||||||
|
|
||||||
ctx.TopDown("tsan_deps", sanitizerDepsMutator(tsan))
|
ctx.TopDown("tsan_deps", sanitizerDepsMutator(tsan))
|
||||||
ctx.BottomUp("tsan", sanitizerMutator(tsan)).Parallel()
|
ctx.BottomUp("tsan", sanitizerMutator(tsan)).Parallel()
|
||||||
|
|
||||||
|
@ -440,7 +437,12 @@ func (ctx *moduleContextImpl) toolchain() config.Toolchain {
|
||||||
}
|
}
|
||||||
|
|
||||||
func (ctx *moduleContextImpl) static() bool {
|
func (ctx *moduleContextImpl) static() bool {
|
||||||
return ctx.mod.static()
|
if static, ok := ctx.mod.linker.(interface {
|
||||||
|
static() bool
|
||||||
|
}); ok {
|
||||||
|
return static.static()
|
||||||
|
}
|
||||||
|
return false
|
||||||
}
|
}
|
||||||
|
|
||||||
func (ctx *moduleContextImpl) staticBinary() bool {
|
func (ctx *moduleContextImpl) staticBinary() bool {
|
||||||
|
@ -1279,15 +1281,6 @@ func (c *Module) Srcs() android.Paths {
|
||||||
return android.Paths{}
|
return android.Paths{}
|
||||||
}
|
}
|
||||||
|
|
||||||
func (c *Module) static() bool {
|
|
||||||
if static, ok := c.linker.(interface {
|
|
||||||
static() bool
|
|
||||||
}); ok {
|
|
||||||
return static.static()
|
|
||||||
}
|
|
||||||
return false
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
//
|
||||||
// Defaults
|
// Defaults
|
||||||
//
|
//
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
{
|
|
||||||
global:
|
|
||||||
__cfi_check;
|
|
||||||
};
|
|
|
@ -513,10 +513,6 @@ func (library *libraryDecorator) linkShared(ctx ModuleContext,
|
||||||
if versionScript.Valid() {
|
if versionScript.Valid() {
|
||||||
flags.LdFlags = append(flags.LdFlags, "-Wl,--version-script,"+versionScript.String())
|
flags.LdFlags = append(flags.LdFlags, "-Wl,--version-script,"+versionScript.String())
|
||||||
linkerDeps = append(linkerDeps, versionScript.Path())
|
linkerDeps = append(linkerDeps, versionScript.Path())
|
||||||
if library.sanitize.isSanitizerEnabled(cfi) {
|
|
||||||
flags.LdFlags = append(flags.LdFlags, "-Wl,--version-script,"+cfiExportsMap.String())
|
|
||||||
linkerDeps = append(linkerDeps, cfiExportsMap)
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
if unexportedSymbols.Valid() {
|
if unexportedSymbols.Valid() {
|
||||||
ctx.PropertyErrorf("unexported_symbols_list", "Only supported on Darwin")
|
ctx.PropertyErrorf("unexported_symbols_list", "Only supported on Darwin")
|
||||||
|
|
108
cc/sanitize.go
108
cc/sanitize.go
|
@ -32,14 +32,12 @@ var (
|
||||||
asanLdflags = []string{"-Wl,-u,__asan_preinit"}
|
asanLdflags = []string{"-Wl,-u,__asan_preinit"}
|
||||||
asanLibs = []string{"libasan"}
|
asanLibs = []string{"libasan"}
|
||||||
|
|
||||||
cfiCflags = []string{"-flto", "-fsanitize-cfi-cross-dso",
|
cfiCflags = []string{"-flto", "-fsanitize-cfi-cross-dso", "-fvisibility=default",
|
||||||
"-fsanitize-blacklist=external/compiler-rt/lib/cfi/cfi_blacklist.txt"}
|
"-fsanitize-blacklist=external/compiler-rt/lib/cfi/cfi_blacklist.txt"}
|
||||||
// FIXME: revert the __cfi_check flag when clang is updated to r280031.
|
// FIXME: revert the __cfi_check flag when clang is updated to r280031.
|
||||||
cfiLdflags = []string{"-flto", "-fsanitize-cfi-cross-dso", "-fsanitize=cfi",
|
cfiLdflags = []string{"-flto", "-fsanitize-cfi-cross-dso", "-fsanitize=cfi",
|
||||||
"-Wl,-plugin-opt,O1 -Wl,-export-dynamic-symbol=__cfi_check"}
|
"-Wl,-plugin-opt,O1 -Wl,-export-dynamic-symbol=__cfi_check"}
|
||||||
cfiArflags = []string{"--plugin ${config.ClangBin}/../lib64/LLVMgold.so"}
|
cfiArflags = []string{"--plugin ${config.ClangBin}/../lib64/LLVMgold.so"}
|
||||||
cfiExportsMapPath = "build/soong/cc/config/cfi_exports.map"
|
|
||||||
cfiExportsMap android.Path
|
|
||||||
|
|
||||||
intOverflowCflags = []string{"-fsanitize-blacklist=build/soong/cc/config/integer_overflow_blacklist.txt"}
|
intOverflowCflags = []string{"-fsanitize-blacklist=build/soong/cc/config/integer_overflow_blacklist.txt"}
|
||||||
)
|
)
|
||||||
|
@ -58,7 +56,6 @@ const (
|
||||||
asan sanitizerType = iota + 1
|
asan sanitizerType = iota + 1
|
||||||
tsan
|
tsan
|
||||||
intOverflow
|
intOverflow
|
||||||
cfi
|
|
||||||
)
|
)
|
||||||
|
|
||||||
func (t sanitizerType) String() string {
|
func (t sanitizerType) String() string {
|
||||||
|
@ -69,8 +66,6 @@ func (t sanitizerType) String() string {
|
||||||
return "tsan"
|
return "tsan"
|
||||||
case intOverflow:
|
case intOverflow:
|
||||||
return "intOverflow"
|
return "intOverflow"
|
||||||
case cfi:
|
|
||||||
return "cfi"
|
|
||||||
default:
|
default:
|
||||||
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
||||||
}
|
}
|
||||||
|
@ -256,8 +251,6 @@ func (sanitize *sanitize) begin(ctx BaseModuleContext) {
|
||||||
ctx.ModuleErrorf(`Use of "coverage" also requires "address"`)
|
ctx.ModuleErrorf(`Use of "coverage" also requires "address"`)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
cfiExportsMap = android.PathForSource(ctx, cfiExportsMapPath)
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func (sanitize *sanitize) deps(ctx BaseModuleContext, deps Deps) Deps {
|
func (sanitize *sanitize) deps(ctx BaseModuleContext, deps Deps) Deps {
|
||||||
|
@ -369,23 +362,12 @@ func (sanitize *sanitize) flags(ctx ModuleContext, flags Flags) Flags {
|
||||||
flags.LdFlags = append(flags.LdFlags, "-march=armv7-a")
|
flags.LdFlags = append(flags.LdFlags, "-march=armv7-a")
|
||||||
}
|
}
|
||||||
sanitizers = append(sanitizers, "cfi")
|
sanitizers = append(sanitizers, "cfi")
|
||||||
|
|
||||||
flags.CFlags = append(flags.CFlags, cfiCflags...)
|
flags.CFlags = append(flags.CFlags, cfiCflags...)
|
||||||
// Only append the default visibility flag if -fvisibility has not already been set
|
|
||||||
// to hidden.
|
|
||||||
if !inList("-fvisibility=hidden", flags.CFlags) {
|
|
||||||
flags.CFlags = append(flags.CFlags, "-fvisibility=default")
|
|
||||||
}
|
|
||||||
flags.LdFlags = append(flags.LdFlags, cfiLdflags...)
|
flags.LdFlags = append(flags.LdFlags, cfiLdflags...)
|
||||||
flags.ArFlags = append(flags.ArFlags, cfiArflags...)
|
flags.ArFlags = append(flags.ArFlags, cfiArflags...)
|
||||||
if Bool(sanitize.Properties.Sanitize.Diag.Cfi) {
|
if Bool(sanitize.Properties.Sanitize.Diag.Cfi) {
|
||||||
diagSanitizers = append(diagSanitizers, "cfi")
|
diagSanitizers = append(diagSanitizers, "cfi")
|
||||||
}
|
}
|
||||||
|
|
||||||
if ctx.staticBinary() {
|
|
||||||
_, flags.CFlags = removeFromList("-fsanitize-cfi-cross-dso", flags.CFlags)
|
|
||||||
_, flags.LdFlags = removeFromList("-fsanitize-cfi-cross-dso", flags.LdFlags)
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
if Bool(sanitize.Properties.Sanitize.Integer_overflow) {
|
if Bool(sanitize.Properties.Sanitize.Integer_overflow) {
|
||||||
|
@ -469,16 +451,18 @@ func (sanitize *sanitize) inSanitizerDir() bool {
|
||||||
return sanitize.Properties.InSanitizerDir
|
return sanitize.Properties.InSanitizerDir
|
||||||
}
|
}
|
||||||
|
|
||||||
func (sanitize *sanitize) getSanitizerBoolPtr(t sanitizerType) *bool {
|
func (sanitize *sanitize) Sanitizer(t sanitizerType) bool {
|
||||||
|
if sanitize == nil {
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
switch t {
|
switch t {
|
||||||
case asan:
|
case asan:
|
||||||
return sanitize.Properties.Sanitize.Address
|
return Bool(sanitize.Properties.Sanitize.Address)
|
||||||
case tsan:
|
case tsan:
|
||||||
return sanitize.Properties.Sanitize.Thread
|
return Bool(sanitize.Properties.Sanitize.Thread)
|
||||||
case intOverflow:
|
case intOverflow:
|
||||||
return sanitize.Properties.Sanitize.Integer_overflow
|
return Bool(sanitize.Properties.Sanitize.Integer_overflow)
|
||||||
case cfi:
|
|
||||||
return sanitize.Properties.Sanitize.Cfi
|
|
||||||
default:
|
default:
|
||||||
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
||||||
}
|
}
|
||||||
|
@ -495,9 +479,6 @@ func (sanitize *sanitize) SetSanitizer(t sanitizerType, b bool) {
|
||||||
sanitize.Properties.Sanitize.Thread = boolPtr(b)
|
sanitize.Properties.Sanitize.Thread = boolPtr(b)
|
||||||
case intOverflow:
|
case intOverflow:
|
||||||
sanitize.Properties.Sanitize.Integer_overflow = boolPtr(b)
|
sanitize.Properties.Sanitize.Integer_overflow = boolPtr(b)
|
||||||
case cfi:
|
|
||||||
sanitize.Properties.Sanitize.Cfi = boolPtr(b)
|
|
||||||
sanitize.Properties.Sanitize.Diag.Cfi = boolPtr(b)
|
|
||||||
default:
|
default:
|
||||||
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
panic(fmt.Errorf("unknown sanitizerType %d", t))
|
||||||
}
|
}
|
||||||
|
@ -506,89 +487,40 @@ func (sanitize *sanitize) SetSanitizer(t sanitizerType, b bool) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Check if the sanitizer is explicitly disabled (as opposed to nil by
|
|
||||||
// virtue of not being set).
|
|
||||||
func (sanitize *sanitize) isSanitizerExplicitlyDisabled(t sanitizerType) bool {
|
|
||||||
if sanitize == nil {
|
|
||||||
return false
|
|
||||||
}
|
|
||||||
|
|
||||||
sanitizerVal := sanitize.getSanitizerBoolPtr(t)
|
|
||||||
return sanitizerVal != nil && *sanitizerVal == false
|
|
||||||
}
|
|
||||||
|
|
||||||
// There isn't an analog of the method above (ie:isSanitizerExplicitlyEnabled)
|
|
||||||
// because enabling a sanitizer either directly (via the blueprint) or
|
|
||||||
// indirectly (via a mutator) sets the bool ptr to true, and you can't
|
|
||||||
// distinguish between the cases. It isn't needed though - both cases can be
|
|
||||||
// treated identically.
|
|
||||||
func (sanitize *sanitize) isSanitizerEnabled(t sanitizerType) bool {
|
|
||||||
if sanitize == nil {
|
|
||||||
return false
|
|
||||||
}
|
|
||||||
|
|
||||||
sanitizerVal := sanitize.getSanitizerBoolPtr(t)
|
|
||||||
return sanitizerVal != nil && *sanitizerVal == true
|
|
||||||
}
|
|
||||||
|
|
||||||
// Propagate asan requirements down from binaries
|
// Propagate asan requirements down from binaries
|
||||||
func sanitizerDepsMutator(t sanitizerType) func(android.TopDownMutatorContext) {
|
func sanitizerDepsMutator(t sanitizerType) func(android.TopDownMutatorContext) {
|
||||||
return func(mctx android.TopDownMutatorContext) {
|
return func(mctx android.TopDownMutatorContext) {
|
||||||
if c, ok := mctx.Module().(*Module); ok && c.sanitize.isSanitizerEnabled(t) {
|
if c, ok := mctx.Module().(*Module); ok && c.sanitize.Sanitizer(t) {
|
||||||
mctx.VisitDepsDepthFirst(func(module android.Module) {
|
mctx.VisitDepsDepthFirst(func(module android.Module) {
|
||||||
if d, ok := module.(*Module); ok && d.sanitize != nil &&
|
if d, ok := mctx.Module().(*Module); ok && c.sanitize != nil &&
|
||||||
!d.sanitize.Properties.Sanitize.Never &&
|
!c.sanitize.Properties.Sanitize.Never {
|
||||||
!d.sanitize.isSanitizerExplicitlyDisabled(t) {
|
d.sanitize.Properties.SanitizeDep = true
|
||||||
if (t == cfi && d.static()) || t != cfi {
|
|
||||||
d.sanitize.Properties.SanitizeDep = true
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Create sanitized variants for modules that need them
|
// Create asan variants for modules that need them
|
||||||
func sanitizerMutator(t sanitizerType) func(android.BottomUpMutatorContext) {
|
func sanitizerMutator(t sanitizerType) func(android.BottomUpMutatorContext) {
|
||||||
return func(mctx android.BottomUpMutatorContext) {
|
return func(mctx android.BottomUpMutatorContext) {
|
||||||
if c, ok := mctx.Module().(*Module); ok && c.sanitize != nil {
|
if c, ok := mctx.Module().(*Module); ok && c.sanitize != nil {
|
||||||
if c.isDependencyRoot() && c.sanitize.isSanitizerEnabled(t) {
|
if c.isDependencyRoot() && c.sanitize.Sanitizer(t) {
|
||||||
modules := mctx.CreateVariations(t.String())
|
modules := mctx.CreateVariations(t.String())
|
||||||
modules[0].(*Module).sanitize.SetSanitizer(t, true)
|
modules[0].(*Module).sanitize.SetSanitizer(t, true)
|
||||||
} else if c.sanitize.isSanitizerEnabled(t) || c.sanitize.Properties.SanitizeDep {
|
} else if c.sanitize.Properties.SanitizeDep {
|
||||||
// Save original sanitizer status before we assign values to variant
|
|
||||||
// 0 as that overwrites the original.
|
|
||||||
isSanitizerEnabled := c.sanitize.isSanitizerEnabled(t)
|
|
||||||
|
|
||||||
modules := mctx.CreateVariations("", t.String())
|
modules := mctx.CreateVariations("", t.String())
|
||||||
modules[0].(*Module).sanitize.SetSanitizer(t, false)
|
modules[0].(*Module).sanitize.SetSanitizer(t, false)
|
||||||
modules[1].(*Module).sanitize.SetSanitizer(t, true)
|
modules[1].(*Module).sanitize.SetSanitizer(t, true)
|
||||||
|
|
||||||
modules[0].(*Module).sanitize.Properties.SanitizeDep = false
|
modules[0].(*Module).sanitize.Properties.SanitizeDep = false
|
||||||
modules[1].(*Module).sanitize.Properties.SanitizeDep = false
|
modules[1].(*Module).sanitize.Properties.SanitizeDep = false
|
||||||
if mctx.Device() {
|
if mctx.Device() {
|
||||||
// CFI and ASAN are currently mutually exclusive (CFI defers
|
modules[1].(*Module).sanitize.Properties.InSanitizerDir = true
|
||||||
// to ASAN if you try enabling both), so disable CFI is this
|
|
||||||
// is an ASAN variant.
|
|
||||||
if t == asan {
|
|
||||||
modules[1].(*Module).sanitize.Properties.InSanitizerDir = true
|
|
||||||
modules[1].(*Module).sanitize.SetSanitizer(cfi, false)
|
|
||||||
}
|
|
||||||
} else {
|
} else {
|
||||||
if isSanitizerEnabled {
|
modules[0].(*Module).Properties.PreventInstall = true
|
||||||
modules[0].(*Module).Properties.PreventInstall = true
|
|
||||||
} else {
|
|
||||||
modules[1].(*Module).Properties.PreventInstall = true
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
if mctx.AConfig().EmbeddedInMake() {
|
if mctx.AConfig().EmbeddedInMake() {
|
||||||
if !mctx.Device() {
|
modules[0].(*Module).Properties.HideFromMake = true
|
||||||
if isSanitizerEnabled {
|
|
||||||
modules[0].(*Module).Properties.HideFromMake = true
|
|
||||||
} else {
|
|
||||||
modules[1].(*Module).Properties.HideFromMake = true
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
c.sanitize.Properties.SanitizeDep = false
|
c.sanitize.Properties.SanitizeDep = false
|
||||||
|
|
Loading…
Reference in a new issue