From f90b653667b9314d8342caeb08e652d7d6bc236f Mon Sep 17 00:00:00 2001 From: Nick Kralevich Date: Sat, 15 Aug 2015 15:24:23 +0000 Subject: [PATCH] init: add LOCAL_SANITIZE := integer Call abort() on undefined or sketchy integer behavior. Protects against integer overflow attacks. Change-Id: If73e6b382f2ee645fec406805739f9684ddbb5f0 --- init/Android.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/init/Android.mk b/init/Android.mk index 6737be409..58bff5861 100644 --- a/init/Android.mk +++ b/init/Android.mk @@ -53,6 +53,7 @@ LOCAL_SRC_FILES:= \ LOCAL_STATIC_LIBRARIES := libbase LOCAL_MODULE := libinit +LOCAL_SANITIZE := integer LOCAL_CLANG := true include $(BUILD_STATIC_LIBRARY) @@ -100,6 +101,7 @@ LOCAL_POST_INSTALL_CMD := $(hide) mkdir -p $(TARGET_ROOT_OUT)/sbin; \ ln -sf ../init $(TARGET_ROOT_OUT)/sbin/ueventd; \ ln -sf ../init $(TARGET_ROOT_OUT)/sbin/watchdogd +LOCAL_SANITIZE := integer LOCAL_CLANG := true include $(BUILD_EXECUTABLE) @@ -117,5 +119,6 @@ LOCAL_SHARED_LIBRARIES += \ libbase \ LOCAL_STATIC_LIBRARIES := libinit +LOCAL_SANITIZE := integer LOCAL_CLANG := true include $(BUILD_NATIVE_TEST)