blob: bbf3b7dff24dab51c21d24c5f3a9204265e7e214 [file] [log] [blame]
Dan Albert4ae5d4b2014-10-31 16:23:08 -07001##############################################
2## Perform configuration steps for sanitizers.
3##############################################
4
Dan Albert27ccb752015-04-16 16:21:02 -07005my_sanitize := $(strip $(LOCAL_SANITIZE))
Vishwath Mohan8dcfdce2017-01-18 17:50:29 -08006my_sanitize_diag := $(strip $(LOCAL_SANITIZE_DIAG))
Dan Albert08cca282014-12-11 18:56:26 -08007
Dan Albert4c401412015-08-19 20:13:33 -07008my_global_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -07009my_global_sanitize_diag :=
Dan Willemsenf0638392018-09-04 22:25:22 -070010ifdef LOCAL_IS_HOST_MODULE
11 ifneq ($($(my_prefix)OS),windows)
12 my_global_sanitize := $(strip $(SANITIZE_HOST))
Dan Albert4c401412015-08-19 20:13:33 -070013
Dan Willemsenf0638392018-09-04 22:25:22 -070014 # SANITIZE_HOST=true is a deprecated way to say SANITIZE_HOST=address.
15 my_global_sanitize := $(subst true,address,$(my_global_sanitize))
Dan Albert4c401412015-08-19 20:13:33 -070016 endif
Dan Willemsenf0638392018-09-04 22:25:22 -070017else
18 my_global_sanitize := $(strip $(SANITIZE_TARGET))
19 my_global_sanitize_diag := $(strip $(SANITIZE_TARGET_DIAG))
Dan Albert4c401412015-08-19 20:13:33 -070020endif
21
Ivan Lozanob4749cb2017-07-21 10:33:32 -070022# Disable global integer_overflow in excluded paths.
23ifneq ($(filter integer_overflow, $(my_global_sanitize)),)
24 combined_exclude_paths := $(INTEGER_OVERFLOW_EXCLUDE_PATHS) \
25 $(PRODUCT_INTEGER_OVERFLOW_EXCLUDE_PATHS)
26
27 ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_exclude_paths)),\
28 $(filter $(dir)%,$(LOCAL_PATH)))),)
29 my_global_sanitize := $(filter-out integer_overflow,$(my_global_sanitize))
30 my_global_sanitize_diag := $(filter-out integer_overflow,$(my_global_sanitize_diag))
31 endif
32endif
33
Ivan Lozano702e8bd2018-03-15 14:49:20 -070034# Global integer sanitization doesn't support static modules.
35ifeq ($(filter SHARED_LIBRARIES EXECUTABLES,$(LOCAL_MODULE_CLASS)),)
36 my_global_sanitize := $(filter-out integer_overflow,$(my_global_sanitize))
37 my_global_sanitize_diag := $(filter-out integer_overflow,$(my_global_sanitize_diag))
38endif
39ifeq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
40 my_global_sanitize := $(filter-out integer_overflow,$(my_global_sanitize))
41 my_global_sanitize_diag := $(filter-out integer_overflow,$(my_global_sanitize_diag))
42endif
43
Vishwath Mohan23b2d2e2017-10-31 02:25:16 -070044# Disable global CFI in excluded paths
45ifneq ($(filter cfi, $(my_global_sanitize)),)
46 combined_exclude_paths := $(CFI_EXCLUDE_PATHS) \
47 $(PRODUCT_CFI_EXCLUDE_PATHS)
48
49 ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_exclude_paths)),\
50 $(filter $(dir)%,$(LOCAL_PATH)))),)
51 my_global_sanitize := $(filter-out cfi,$(my_global_sanitize))
52 my_global_sanitize_diag := $(filter-out cfi,$(my_global_sanitize_diag))
53 endif
54endif
55
Dan Albert4c401412015-08-19 20:13:33 -070056ifneq ($(my_global_sanitize),)
Evgenii Stepanov71faa192016-05-19 17:45:21 -070057 my_sanitize := $(my_global_sanitize) $(my_sanitize)
Dan Albert4c401412015-08-19 20:13:33 -070058endif
Ivan Lozano4a363732017-06-28 09:11:26 -070059ifneq ($(my_global_sanitize_diag),)
60 my_sanitize_diag := $(my_global_sanitize_diag) $(my_sanitize_diag)
61endif
Dan Albert4c401412015-08-19 20:13:33 -070062
Andreas Gampe6b30d772016-06-27 15:15:31 -070063# The sanitizer specified in the product configuration wins over the previous.
64ifneq ($(SANITIZER.$(TARGET_PRODUCT).$(LOCAL_MODULE).CONFIG),)
65 my_sanitize := $(SANITIZER.$(TARGET_PRODUCT).$(LOCAL_MODULE).CONFIG)
66 ifeq ($(my_sanitize),never)
67 my_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -070068 my_sanitize_diag :=
Andreas Gampe6b30d772016-06-27 15:15:31 -070069 endif
70endif
71
Colin Cross23618422016-11-02 15:05:21 -070072ifndef LOCAL_IS_HOST_MODULE
73 # Add a filter point for 32-bit vs 64-bit sanitization (to lighten the burden)
74 SANITIZE_TARGET_ARCH ?= $(TARGET_ARCH) $(TARGET_2ND_ARCH)
75 ifeq ($(filter $(SANITIZE_TARGET_ARCH),$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),)
76 my_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -070077 my_sanitize_diag :=
Colin Cross23618422016-11-02 15:05:21 -070078 endif
Andreas Gampecd257402016-06-20 17:36:49 -070079endif
80
Andreas Gampe3d3b0c92016-06-20 17:46:29 -070081# Add a filter point based on module owner (to lighten the burden). The format is a space- or
82# colon-separated list of owner names.
83ifneq (,$(SANITIZE_NEVER_BY_OWNER))
84 ifneq (,$(LOCAL_MODULE_OWNER))
85 ifneq (,$(filter $(LOCAL_MODULE_OWNER),$(subst :, ,$(SANITIZE_NEVER_BY_OWNER))))
86 $(warning Not sanitizing $(LOCAL_MODULE) based on module owner.)
87 my_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -070088 my_sanitize_diag :=
Andreas Gampe3d3b0c92016-06-20 17:46:29 -070089 endif
90 endif
91endif
92
Dan Albert08cca282014-12-11 18:56:26 -080093# Don't apply sanitizers to NDK code.
94ifdef LOCAL_SDK_VERSION
Dan Albert4c401412015-08-19 20:13:33 -070095 my_sanitize :=
Dan Willemsenf761c0f2016-06-28 16:47:43 -070096 my_global_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -070097 my_sanitize_diag :=
Dan Albert27ccb752015-04-16 16:21:02 -070098endif
99
Dan Albert4c401412015-08-19 20:13:33 -0700100# Never always wins.
101ifeq ($(LOCAL_SANITIZE),never)
Dan Albert08cca282014-12-11 18:56:26 -0800102 my_sanitize :=
Ivan Lozano4a363732017-06-28 09:11:26 -0700103 my_sanitize_diag :=
Dan Albert08cca282014-12-11 18:56:26 -0800104endif
105
Vishwath Mohan6106a4e2018-05-24 18:04:25 -0700106# Enable CFI in included paths (for Arm64 only).
Vishwath Mohan23b2d2e2017-10-31 02:25:16 -0700107ifeq ($(filter cfi, $(my_sanitize)),)
Vishwath Mohan6106a4e2018-05-24 18:04:25 -0700108 ifneq ($(filter arm64,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),)
109 combined_include_paths := $(CFI_INCLUDE_PATHS) \
110 $(PRODUCT_CFI_INCLUDE_PATHS)
Vishwath Mohan23b2d2e2017-10-31 02:25:16 -0700111
Vishwath Mohan6106a4e2018-05-24 18:04:25 -0700112 ifneq ($(strip $(foreach dir,$(subst $(comma),$(space),$(combined_include_paths)),\
113 $(filter $(dir)%,$(LOCAL_PATH)))),)
114 my_sanitize := cfi $(my_sanitize)
115 my_sanitize_diag := cfi $(my_sanitize_diag)
116 endif
Vishwath Mohan23b2d2e2017-10-31 02:25:16 -0700117 endif
118endif
119
Vishwath Mohan8dcfdce2017-01-18 17:50:29 -0800120# If CFI is disabled globally, remove it from my_sanitize.
Vishwath Mohan45665b42017-01-24 13:20:28 -0800121ifeq ($(strip $(ENABLE_CFI)),false)
Vishwath Mohan8dcfdce2017-01-18 17:50:29 -0800122 my_sanitize := $(filter-out cfi,$(my_sanitize))
123 my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag))
124endif
125
Vishwath Mohana2046062017-02-07 20:28:07 -0800126# Disable CFI for arm32 (b/35157333).
127ifneq ($(filter arm,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),)
128 my_sanitize := $(filter-out cfi,$(my_sanitize))
129 my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag))
130endif
131
Vishwath Mohanc026f6d2017-04-20 07:39:13 -0700132# Also disable CFI if ASAN is enabled.
133ifneq ($(filter address,$(my_sanitize)),)
134 my_sanitize := $(filter-out cfi,$(my_sanitize))
135 my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag))
136endif
137
Evgenii Stepanov8c50e3c2017-01-31 17:08:33 -0800138# CFI needs gold linker, and mips toolchain does not have one.
139ifneq ($(filter mips mips64,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),)
140 my_sanitize := $(filter-out cfi,$(my_sanitize))
141 my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag))
142endif
143
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700144# Disable sanitizers which need the UBSan runtime for host targets.
Vishwath Mohan96a130b2017-11-17 11:19:36 -0800145ifdef LOCAL_IS_HOST_MODULE
146 my_sanitize := $(filter-out cfi,$(my_sanitize))
147 my_sanitize_diag := $(filter-out cfi,$(my_sanitize_diag))
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700148 my_sanitize := $(filter-out signed-integer-overflow unsigned-integer-overflow integer_overflow,$(my_sanitize))
149 my_sanitize_diag := $(filter-out signed-integer-overflow unsigned-integer-overflow integer_overflow,$(my_sanitize_diag))
Vishwath Mohan96a130b2017-11-17 11:19:36 -0800150endif
151
Ivan Lozano4a363732017-06-28 09:11:26 -0700152# Support for local sanitize blacklist paths.
153ifneq ($(my_sanitize)$(my_global_sanitize),)
154 ifneq ($(LOCAL_SANITIZE_BLACKLIST),)
155 my_cflags += -fsanitize-blacklist=$(LOCAL_PATH)/$(LOCAL_SANITIZE_BLACKLIST)
156 endif
157endif
158
Ivan Lozanob4749cb2017-07-21 10:33:32 -0700159# Disable integer_overflow if LOCAL_NOSANITIZE=integer.
Ivan Lozano4a363732017-06-28 09:11:26 -0700160ifneq ($(filter integer_overflow, $(my_global_sanitize) $(my_sanitize)),)
161 ifneq ($(filter integer, $(strip $(LOCAL_NOSANITIZE))),)
162 my_sanitize := $(filter-out integer_overflow,$(my_sanitize))
163 my_sanitize_diag := $(filter-out integer_overflow,$(my_sanitize_diag))
164 endif
165endif
166
Evgenii Stepanov42823662016-05-12 13:07:17 -0700167my_nosanitize = $(strip $(LOCAL_NOSANITIZE))
168ifneq ($(my_nosanitize),)
169 my_sanitize := $(filter-out $(my_nosanitize),$(my_sanitize))
170endif
171
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700172ifneq ($(filter arm x86 x86_64,$(TARGET_$(LOCAL_2ND_ARCH_VAR_PREFIX)ARCH)),)
173 my_sanitize := $(filter-out hwaddress,$(my_sanitize))
174endif
175
176ifneq ($(filter hwaddress,$(my_sanitize)),)
177 my_sanitize := $(filter-out address,$(my_sanitize))
178 my_sanitize := $(filter-out thread,$(my_sanitize))
Evgenii Stepanov88a95a32018-12-04 17:06:45 -0800179 my_sanitize := $(filter-out cfi,$(my_sanitize))
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700180endif
181
182ifneq ($(filter hwaddress,$(my_sanitize)),)
183 my_shared_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)HWADDRESS_SANITIZER_RUNTIME_LIBRARY)
Evgenii Stepanoved907462018-11-01 15:43:14 -0700184 ifneq ($(filter EXECUTABLES NATIVE_TESTS,$(LOCAL_MODULE_CLASS)),)
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700185 ifeq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
186 my_static_libraries := $(my_static_libraries) $($(LOCAL_2ND_ARCH_VAR_PREFIX)HWADDRESS_SANITIZER_STATIC_LIBRARY)
187 endif
188 endif
189endif
190
Dan Alberta6311b72015-07-30 10:17:33 -0700191# TSAN is not supported on 32-bit architectures. For non-multilib cases, make
192# its use an error. For multilib cases, don't use it for the 32-bit case.
193ifneq ($(filter thread,$(my_sanitize)),)
194 ifeq ($(my_32_64_bit_suffix),32)
195 ifeq ($(my_module_multilib),both)
196 my_sanitize := $(filter-out thread,$(my_sanitize))
197 else
198 $(error $(LOCAL_PATH): $(LOCAL_MODULE): TSAN cannot be used for 32-bit modules.)
199 endif
Yabin Cuie77c32e2017-10-19 14:33:58 -0700200 else
201 my_shared_libraries += $(TSAN_RUNTIME_LIBRARY)
Dan Alberta6311b72015-07-30 10:17:33 -0700202 endif
203endif
204
Evgenii Stepanov7dcb8b82016-05-06 18:15:57 -0700205ifneq ($(filter safe-stack,$(my_sanitize)),)
206 ifeq ($(my_32_64_bit_suffix),32)
207 my_sanitize := $(filter-out safe-stack,$(my_sanitize))
208 endif
209endif
210
Kostya Kortchinsky2cfa9972018-06-14 11:02:15 -0700211# Disable Scudo if ASan or TSan is enabled.
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700212ifneq ($(filter address thread hwaddress,$(my_sanitize)),)
Kostya Kortchinsky2cfa9972018-06-14 11:02:15 -0700213 my_sanitize := $(filter-out scudo,$(my_sanitize))
214endif
215
Evgenii Stepanov5adfcb12015-06-25 16:38:25 -0700216# Undefined symbols can occur if a non-sanitized library links
217# sanitized static libraries. That's OK, because the executable
218# always depends on the ASan runtime library, which defines these
219# symbols.
Evgenii Stepanov912b51f2016-05-19 17:49:51 -0700220ifneq ($(filter address thread,$(strip $(SANITIZE_TARGET))),)
Evgenii Stepanov5adfcb12015-06-25 16:38:25 -0700221 ifndef LOCAL_IS_HOST_MODULE
222 ifeq ($(LOCAL_MODULE_CLASS),SHARED_LIBRARIES)
223 ifeq ($(my_sanitize),)
224 my_allow_undefined_symbols := true
225 endif
226 endif
227 endif
228endif
229
Dan Albertb5b2ffe2015-04-16 18:07:07 -0700230ifneq ($(filter default-ub,$(my_sanitize)),)
231 my_sanitize := $(CLANG_DEFAULT_UB_CHECKS)
Dan Albert08cca282014-12-11 18:56:26 -0800232endif
233
Ivan Krasin74b32b82015-09-18 11:54:43 -0700234ifneq ($(filter coverage,$(my_sanitize)),)
235 ifeq ($(filter address,$(my_sanitize)),)
236 $(error $(LOCAL_PATH): $(LOCAL_MODULE): Use of 'coverage' also requires 'address')
237 endif
Zach Rigglebe0811f2017-08-21 17:07:42 -0400238 my_cflags += -fsanitize-coverage=trace-pc-guard,indirect-calls,trace-cmp
Ivan Krasin74b32b82015-09-18 11:54:43 -0700239 my_sanitize := $(filter-out coverage,$(my_sanitize))
240endif
241
Ivan Lozano4a363732017-06-28 09:11:26 -0700242ifneq ($(filter integer_overflow,$(my_sanitize)),)
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700243 # Respect LOCAL_NOSANITIZE for integer-overflow flags.
244 ifeq ($(filter signed-integer-overflow, $(strip $(LOCAL_NOSANITIZE))),)
245 my_sanitize += signed-integer-overflow
246 endif
247 ifeq ($(filter unsigned-integer-overflow, $(strip $(LOCAL_NOSANITIZE))),)
248 my_sanitize += unsigned-integer-overflow
249 endif
250 my_cflags += $(INTEGER_OVERFLOW_EXTRA_CFLAGS)
Ivan Lozano4a363732017-06-28 09:11:26 -0700251
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700252 # Check for diagnostics mode.
253 ifneq ($(filter integer_overflow,$(my_sanitize_diag)),)
254 ifneq ($(filter SHARED_LIBRARIES EXECUTABLES,$(LOCAL_MODULE_CLASS)),)
255 ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
Ivan Lozano911cb992018-02-21 13:41:05 -0800256 my_sanitize_diag += signed-integer-overflow
257 my_sanitize_diag += unsigned-integer-overflow
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700258 else
259 $(call pretty-error,Make cannot apply integer overflow diagnostics to static binary.)
Ivan Lozano4a363732017-06-28 09:11:26 -0700260 endif
Ivan Lozano702e8bd2018-03-15 14:49:20 -0700261 else
262 $(call pretty-error,Make cannot apply integer overflow diagnostics to static library.)
Ivan Lozano4a363732017-06-28 09:11:26 -0700263 endif
264 endif
265 my_sanitize := $(filter-out integer_overflow,$(my_sanitize))
266endif
267
268# Makes sure integer_overflow diagnostics is removed from the diagnostics list
269# even if integer_overflow is not set for some reason.
270ifneq ($(filter integer_overflow,$(my_sanitize_diag)),)
271 my_sanitize_diag := $(filter-out integer_overflow,$(my_sanitize_diag))
272endif
273
Dan Albert08cca282014-12-11 18:56:26 -0800274ifneq ($(my_sanitize),)
Stephen Hinese8119e92015-11-09 16:32:11 -0800275 fsanitize_arg := $(subst $(space),$(comma),$(my_sanitize))
Dan Albert08cca282014-12-11 18:56:26 -0800276 my_cflags += -fsanitize=$(fsanitize_arg)
Evgenii Stepanov9b82b3f2018-08-31 12:57:26 -0700277 my_asflags += -fsanitize=$(fsanitize_arg)
Dan Albert08cca282014-12-11 18:56:26 -0800278
279 ifdef LOCAL_IS_HOST_MODULE
Dan Albertabf4bc92015-06-16 23:27:34 -0700280 my_cflags += -fno-sanitize-recover=all
Dan Albert08cca282014-12-11 18:56:26 -0800281 my_ldflags += -fsanitize=$(fsanitize_arg)
Dan Albertabf4bc92015-06-16 23:27:34 -0700282 else
Evgenii Stepanov71faa192016-05-19 17:45:21 -0700283 my_cflags += -fsanitize-trap=all
284 my_cflags += -ftrap-function=abort
Evgenii Stepanov55f73e62016-05-12 13:07:36 -0700285 ifneq ($(filter address thread,$(my_sanitize)),)
Evgenii Stepanov71faa192016-05-19 17:45:21 -0700286 my_cflags += -fno-sanitize-trap=address,thread
Evgenii Stepanov55f73e62016-05-12 13:07:36 -0700287 my_shared_libraries += libdl
288 endif
Dan Albert08cca282014-12-11 18:56:26 -0800289 endif
290endif
291
Evgenii Stepanov202c7a72016-07-07 10:56:39 -0700292ifneq ($(filter cfi,$(my_sanitize)),)
Evgenii Stepanov81bea1b2017-01-20 14:12:08 -0800293 # __cfi_check needs to be built as Thumb (see the code in linker_cfi.cpp).
294 # LLVM is not set up to do this on a function basis, so force Thumb on the
295 # entire module.
296 LOCAL_ARM_MODE := thumb
Vishwath Mohan5b69c062017-02-14 07:55:37 -0800297 my_cflags += $(CFI_EXTRA_CFLAGS)
Evgenii Stepanov9b82b3f2018-08-31 12:57:26 -0700298 my_asflags += $(CFI_EXTRA_ASFLAGS)
Vishwath Mohan85f72442017-11-01 09:21:20 +0000299 # Only append the default visibility flag if -fvisibility has not already been
300 # set to hidden.
301 ifeq ($(filter -fvisibility=hidden,$(LOCAL_CFLAGS)),)
302 my_cflags += -fvisibility=default
303 endif
Vishwath Mohan5b69c062017-02-14 07:55:37 -0800304 my_ldflags += $(CFI_EXTRA_LDFLAGS)
Evgenii Stepanove1b96f32017-01-23 16:57:38 -0800305 my_arflags += --plugin $(LLVM_PREBUILTS_PATH)/../lib64/LLVMgold.so
Vishwath Mohan85f72442017-11-01 09:21:20 +0000306
307 ifeq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
308 my_ldflags := $(filter-out -fsanitize-cfi-cross-dso,$(my_ldflags))
309 my_cflags := $(filter-out -fsanitize-cfi-cross-dso,$(my_cflags))
310 else
311 # Apply the version script to non-static executables
312 my_ldflags += -Wl,--version-script,build/soong/cc/config/cfi_exports.map
313 LOCAL_ADDITIONAL_DEPENDENCIES += build/soong/cc/config/cfi_exports.map
314 endif
Evgenii Stepanov202c7a72016-07-07 10:56:39 -0700315endif
316
Chih-Hung Hsiehad741e62016-03-09 14:54:55 -0800317# If local or global modules need ASAN, add linker flags.
318ifneq ($(filter address,$(my_global_sanitize) $(my_sanitize)),)
Dan Albert4ae5d4b2014-10-31 16:23:08 -0700319 my_ldflags += $(ADDRESS_SANITIZER_CONFIG_EXTRA_LDFLAGS)
320 ifdef LOCAL_IS_HOST_MODULE
Dan Albert08cca282014-12-11 18:56:26 -0800321 # -nodefaultlibs (provided with libc++) prevents the driver from linking
322 # libraries needed with -fsanitize=address. http://b/18650275 (WAI)
Dan Albert1f0d5302015-04-28 14:55:50 -0700323 my_ldflags += -Wl,--no-as-needed
Dan Albert4ae5d4b2014-10-31 16:23:08 -0700324 else
Chih-Hung Hsiehad741e62016-03-09 14:54:55 -0800325 # Add asan libraries unless LOCAL_MODULE is the asan library.
Evgenii Stepanovf0b15e12015-04-24 16:34:47 -0700326 # ASan runtime library must be the first in the link order.
Chih-Hung Hsiehad741e62016-03-09 14:54:55 -0800327 ifeq (,$(filter $(LOCAL_MODULE),$($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_RUNTIME_LIBRARY)))
328 my_shared_libraries := $($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_RUNTIME_LIBRARY) \
329 $(my_shared_libraries)
330 endif
331 ifeq (,$(filter $(LOCAL_MODULE),$(ADDRESS_SANITIZER_CONFIG_EXTRA_STATIC_LIBRARIES)))
332 my_static_libraries += $(ADDRESS_SANITIZER_CONFIG_EXTRA_STATIC_LIBRARIES)
333 endif
334
335 # Do not add unnecessary dependency in shared libraries.
336 ifeq ($(LOCAL_MODULE_CLASS),SHARED_LIBRARIES)
337 my_ldflags += -Wl,--as-needed
338 endif
Ying Wanga05e2222015-08-17 16:13:24 -0700339
Mikhail Naganovaa73cef2018-12-20 15:55:08 -0800340 ifneq ($(filter EXECUTABLES NATIVE_TESTS,$(LOCAL_MODULE_CLASS)),)
Colin Crossd08699e2016-07-17 15:28:07 -0700341 ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
342 my_linker := $($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_LINKER)
343 # Make sure linker_asan get installed.
Logan Chienc6d2cf82019-01-31 17:07:50 +0800344 $(LOCAL_INSTALLED_MODULE) : | $(PRODUCT_OUT)$($(LOCAL_2ND_ARCH_VAR_PREFIX)ADDRESS_SANITIZER_LINKER_FILE)
Colin Crossd08699e2016-07-17 15:28:07 -0700345 endif
346 endif
Dan Albert08cca282014-12-11 18:56:26 -0800347 endif
348endif
349
Chih-Hung Hsiehad741e62016-03-09 14:54:55 -0800350# If local module needs ASAN, add compiler flags.
351ifneq ($(filter address,$(my_sanitize)),)
352 # Frame pointer based unwinder in ASan requires ARM frame setup.
353 LOCAL_ARM_MODE := arm
354 my_cflags += $(ADDRESS_SANITIZER_CONFIG_EXTRA_CFLAGS)
355 ifndef LOCAL_IS_HOST_MODULE
356 my_cflags += -mllvm -asan-globals=0
357 endif
358endif
359
Evgenii Stepanovaec1ffc2018-08-28 13:52:08 -0700360# If local module needs HWASAN, add compiler flags.
361ifneq ($(filter hwaddress,$(my_sanitize)),)
362 my_cflags += $(HWADDRESS_SANITIZER_CONFIG_EXTRA_CFLAGS)
363endif
364
Alexey Polyudove98e5622018-03-27 15:28:12 -0700365# Use minimal diagnostics when integer overflow is enabled; never do it for HOST or AUX modules
366ifeq ($(LOCAL_IS_HOST_MODULE)$(LOCAL_IS_AUX_MODULE),)
Ivan Lozano911cb992018-02-21 13:41:05 -0800367 # Pre-emptively add UBSAN minimal runtime incase a static library dependency requires it
368 ifeq ($(filter STATIC_LIBRARIES,$(LOCAL_MODULE_CLASS)),)
369 ifndef LOCAL_SDK_VERSION
370 my_static_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)UBSAN_MINIMAL_RUNTIME_LIBRARY)
Ivan Lozanoe5081692018-05-11 14:09:36 -0700371 my_ldflags += -Wl,--exclude-libs,$($(LOCAL_2ND_ARCH_VAR_PREFIX)UBSAN_MINIMAL_RUNTIME_LIBRARY).a
Ivan Lozano911cb992018-02-21 13:41:05 -0800372 endif
373 endif
374 ifneq ($(filter unsigned-integer-overflow signed-integer-overflow integer,$(my_sanitize)),)
Kostya Kortchinsky47c10eb2018-10-11 08:56:12 -0700375 ifeq ($(filter unsigned-integer-overflow signed-integer-overflow integer,$(my_sanitize_diag)),)
Ivan Lozano911cb992018-02-21 13:41:05 -0800376 ifeq ($(filter cfi,$(my_sanitize_diag)),)
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700377 ifeq ($(filter address hwaddress,$(my_sanitize)),)
Ivan Lozano911cb992018-02-21 13:41:05 -0800378 my_cflags += -fsanitize-minimal-runtime
379 my_cflags += -fno-sanitize-trap=integer
380 my_cflags += -fno-sanitize-recover=integer
381 endif
382 endif
383 endif
384 endif
385endif
386
Kostya Kortchinsky47c10eb2018-10-11 08:56:12 -0700387# For Scudo, we opt for the minimal runtime, unless some diagnostics are enabled.
388ifneq ($(filter scudo,$(my_sanitize)),)
389 ifeq ($(filter unsigned-integer-overflow signed-integer-overflow integer cfi,$(my_sanitize_diag)),)
390 my_cflags += -fsanitize-minimal-runtime
391 endif
392 ifneq ($(filter -fsanitize-minimal-runtime,$(my_cflags)),)
393 my_shared_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)SCUDO_MINIMAL_RUNTIME_LIBRARY)
394 else
395 my_shared_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)SCUDO_RUNTIME_LIBRARY)
396 endif
397endif
398
Dan Albert9f176552015-04-28 11:26:45 -0700399ifneq ($(strip $(LOCAL_SANITIZE_RECOVER)),)
400 recover_arg := $(subst $(space),$(comma),$(LOCAL_SANITIZE_RECOVER)),
Dan Albert4111d482015-04-16 18:08:44 -0700401 my_cflags += -fsanitize-recover=$(recover_arg)
402endif
Evgenii Stepanov202c7a72016-07-07 10:56:39 -0700403
Ivan Lozano5fb2de72018-12-12 10:04:34 -0800404ifneq ($(strip $(LOCAL_SANITIZE_NO_RECOVER)),)
405 no_recover_arg := $(subst $(space),$(comma),$(LOCAL_SANITIZE_NO_RECOVER)),
406 my_cflags += -fno-sanitize-recover=$(no_recover_arg)
407endif
408
Vishwath Mohan8dcfdce2017-01-18 17:50:29 -0800409ifneq ($(my_sanitize_diag),)
Vishwath Mohan85f72442017-11-01 09:21:20 +0000410 # TODO(vishwath): Add diagnostic support for static executables once
411 # we switch to clang-4393122 (which adds the static ubsan runtime
412 # that this depends on)
413 ifneq ($(LOCAL_FORCE_STATIC_EXECUTABLE),true)
414 notrap_arg := $(subst $(space),$(comma),$(my_sanitize_diag)),
415 my_cflags += -fno-sanitize-trap=$(notrap_arg)
416 # Diagnostic requires a runtime library, unless ASan or TSan are also enabled.
Evgenii Stepanov8841a7f2018-07-27 11:54:32 -0700417 ifeq ($(filter address thread scudo hwaddress,$(my_sanitize)),)
Vishwath Mohan85f72442017-11-01 09:21:20 +0000418 # Does not have to be the first DT_NEEDED unlike ASan.
419 my_shared_libraries += $($(LOCAL_2ND_ARCH_VAR_PREFIX)UBSAN_RUNTIME_LIBRARY)
420 endif
Evgenii Stepanov202c7a72016-07-07 10:56:39 -0700421 endif
422endif
Chih-Hung Hsieh18710622018-11-17 20:18:08 -0800423
424# http://b/119329758, Android core does not boot up with this sanitizer yet.
425# Previously sanitized modules might not pass new implicit-integer-sign-change check.
426# Disable this check unless it has been explicitly specified.
427ifneq ($(findstring fsanitize,$(my_cflags)),)
428 ifneq ($(findstring integer,$(my_cflags)),)
429 ifeq ($(findstring sanitize=implicit-integer-sign-change,$(my_cflags)),)
430 my_cflags += -fno-sanitize=implicit-integer-sign-change
431 endif
432 endif
433endif