add the option of using -fsanitize=local-init for Clang kernel builds

GrapheneOS / linux-hardened

Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.freenode.net ##linux-hardened. Currently maintained at https://github.com/anthraxx/linux-hardened.

https://grapheneos.org/

Other

390 stars 102 forks source link

add the option of using -fsanitize=local-init for Clang kernel builds #59

Closed thestinger closed 6 years ago

thestinger commented 6 years ago

This is already implemented for the CopperheadOS userspace.

thestinger commented 6 years ago

This is now implemented in CopperheadOS:

https://github.com/CopperheadOS/kernel_google_wahoo/commit/e8c3c8c1949e5e52d1d80721c223521522bab9f1

thestinger commented 6 years ago

Calling this done since it works fine with the patched toolchain.