[RFC PATCH 0/2] toolchain: build all user space with sanitizer on glibc

[Christian Marangi]

On Sun, Jan 17, 2021 at 06:10:34PM +0100, Hauke Mehrtens wrote:
> This patch allows to build most the OpenWrt user space with address and 
> undefined behavior sanitizer activated by default.
> This only works with glibc and gcc 10 and I only tested this on x86 64 
> so far. It is not intended to activate this by default ever, but this is 
> helpful to detect (security) bugs in our applications.
> 
> The first patch adds a work around for a problem with our Kconfig 
> system, I did not fully  understand the problems and only provided a 
> workaround for it, if someone has any idea what is going wrong there 
> this would be helpful.
> 
> I already found some problems like memory leaks and a use after free 
> problem, will send separate mails for the later.
> 
> When these sanitizers are activated the OpenWrt userspace needs 
> significant more memory, use at least 256MB for a basic system.
> 
> TODOs:
>  * Fix the Kconfig recursive dependency problem 
>  * Test this on more than x86 / 64
>  * Make it depend on GCC 10 or wait till GCC 10 is the default.
> 

This is a bit of necroposting... But any news with this? Considering we
are switching to gcc12 by default i think these feature are now mature
enough to be finally introduced.

> Hauke Mehrtens (2):
>   Workaround recursive error
>   toolchain: Allow building with ASAN and UBSAN
> 
>  config/Config-build.in                     | 22 ++++++++++++++++++++++
>  include/hardening.mk                       | 14 ++++++++++++++
>  include/package-defaults.mk                |  2 +-
>  include/toolchain-build.mk                 |  2 ++
>  package/boot/grub2/Makefile                |  2 ++
>  package/kernel/mac80211/Makefile           |  2 +-
>  package/libs/toolchain/Makefile            |  2 ++
>  package/network/services/dropbear/Makefile |  2 ++
>  package/network/utils/iw/Makefile          | 11 ++++++++---
>  package/utils/busybox/Makefile             |  2 ++
>  10 files changed, 56 insertions(+), 5 deletions(-)
> 
> -- 
> 2.20.1
> 
> 
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel

-- 
	Ansuel