michaelh/zephyr
1
0
Fork 0
Code Releases Activity

cmake: Enable undefined behavior sanitizer on all targets

Browse source 
GCC and Clang support the undefined behavior sanitizer in any
configuration, the only restriction is that if you want to get nice
messages printed, then you need the ubsan library routines which are only
present for posix architecture or when using picolibc.

This patch adds three new compiler properties:

 * sanitizer_undefined. Enables the undefined behavior sanitizer.
 * sanitizer_undefined_library. Calls ubsan library routines on fault.
 * sanitizer_undefined_trap. Invokes __builtin_trap() on fault.

Overhead for using the trapping sanitizer is fairly low and should be
considered for use in CI once all of the undefined behavior faults in
Zephyr are fixed.

Signed-off-by: Keith Packard <keithp@keithp.com>
This commit is contained in:
Keith Packard 2025-04-07 15:23:02 -07:00 • committed by Benjamin Cabé
commit 2d64237f44
6 changed files with 50 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
cmake/compiler/gcc/compiler_flags.cmake
View file

@ -197,6 +197,10 @@ if(NOT CONFIG_NO_OPTIMIZATIONS)
set_compiler_property(PROPERTY security_fortify_run_time _FORTIFY_SOURCE=2)
endif()
check_set_compiler_property(PROPERTY sanitizer_undefined -fsanitize=undefined)
check_set_compiler_property(PROPERTY sanitizer_undefined_trap -fsanitize-undefined-trap-on-error)
check_set_compiler_property(PROPERTY sanitizer_undefined_library)
# gcc flag for a hosted (no-freestanding) application
check_set_compiler_property(APPEND PROPERTY hosted -fno-freestanding)