diff --git a/lib/Kconfig.ubsan b/lib/Kconfig.ubsan index d69e8b21ebae..f5ed2dceef30 100644 --- a/lib/Kconfig.ubsan +++ b/lib/Kconfig.ubsan @@ -22,6 +22,25 @@ config UBSAN_TRAP can just issue a trap. This reduces the kernel size overhead but turns all warnings into full thread-killing exceptions. +config UBSAN_BOUNDS + bool "Perform array bounds checking" + depends on UBSAN + default UBSAN + help + This option enables detection of direct out of bounds array + accesses, where the array size is known at compile time. Note + that this does not protect character array overflows due to + bad calls to the {str,mem}*cpy() family of functions. + +config UBSAN_MISC + bool "Enable all other Undefined Behavior sanity checks" + depends on UBSAN + default UBSAN + help + This option enables all sanity checks that don't have their + own Kconfig options. Disable this if you only want to have + individually selected checks. + config UBSAN_SANITIZE_ALL bool "Enable instrumentation for the entire kernel" depends on UBSAN diff --git a/scripts/Makefile.ubsan b/scripts/Makefile.ubsan index 668a91510bfe..5b15bc425ec9 100644 --- a/scripts/Makefile.ubsan +++ b/scripts/Makefile.ubsan @@ -5,14 +5,19 @@ ifdef CONFIG_UBSAN_ALIGNMENT CFLAGS_UBSAN += $(call cc-option, -fsanitize=alignment) endif +ifdef CONFIG_UBSAN_BOUNDS + CFLAGS_UBSAN += $(call cc-option, -fsanitize=bounds) +endif + +ifdef CONFIG_UBSAN_MISC CFLAGS_UBSAN += $(call cc-option, -fsanitize=shift) CFLAGS_UBSAN += $(call cc-option, -fsanitize=integer-divide-by-zero) CFLAGS_UBSAN += $(call cc-option, -fsanitize=unreachable) CFLAGS_UBSAN += $(call cc-option, -fsanitize=signed-integer-overflow) - CFLAGS_UBSAN += $(call cc-option, -fsanitize=bounds) CFLAGS_UBSAN += $(call cc-option, -fsanitize=object-size) CFLAGS_UBSAN += $(call cc-option, -fsanitize=bool) CFLAGS_UBSAN += $(call cc-option, -fsanitize=enum) +endif ifdef CONFIG_UBSAN_TRAP CFLAGS_UBSAN += $(call cc-option, -fsanitize-undefined-trap-on-error)