summaryrefslogtreecommitdiff
path: root/scripts/Makefile.ubsan
diff options
context:
space:
mode:
authorKees Cook <kees@kernel.org>2025-03-06 20:19:11 -0800
committerKees Cook <kees@kernel.org>2025-03-07 19:58:05 -0800
commit47f4af43e7c0cf702d6a6321542f0c0d9c4216e3 (patch)
tree0ef05c6036089b68f36954529f676ddbc09192e0 /scripts/Makefile.ubsan
parent272a767063a6856cd1e18bb951d2be4f047b9858 (diff)
downloadlinux-47f4af43e7c0cf702d6a6321542f0c0d9c4216e3.tar.gz
linux-47f4af43e7c0cf702d6a6321542f0c0d9c4216e3.tar.bz2
linux-47f4af43e7c0cf702d6a6321542f0c0d9c4216e3.zip
ubsan/overflow: Enable ignorelist parsing and add type filter
Limit integer wrap-around mitigation to only the "size_t" type (for now). Notably this covers all special functions/builtins that return "size_t", like sizeof(). This remains an experimental feature and is likely to be replaced with type annotations. Reviewed-by: Justin Stitt <justinstitt@google.com> Link: https://lore.kernel.org/r/20250307041914.937329-3-kees@kernel.org Signed-off-by: Kees Cook <kees@kernel.org>
Diffstat (limited to 'scripts/Makefile.ubsan')
-rw-r--r--scripts/Makefile.ubsan3
1 files changed, 2 insertions, 1 deletions
diff --git a/scripts/Makefile.ubsan b/scripts/Makefile.ubsan
index 233379c193a7..9e35198edbf0 100644
--- a/scripts/Makefile.ubsan
+++ b/scripts/Makefile.ubsan
@@ -19,5 +19,6 @@ ubsan-integer-wrap-cflags-$(CONFIG_UBSAN_INTEGER_WRAP) += \
-fsanitize=signed-integer-overflow \
-fsanitize=unsigned-integer-overflow \
-fsanitize=implicit-signed-integer-truncation \
- -fsanitize=implicit-unsigned-integer-truncation
+ -fsanitize=implicit-unsigned-integer-truncation \
+ -fsanitize-ignorelist=$(srctree)/scripts/integer-wrap-ignore.scl
export CFLAGS_UBSAN_INTEGER_WRAP := $(ubsan-integer-wrap-cflags-y)