mirror
/
rustc-dev-guide
mirror of https://github.com/rust-lang/rustc-dev-guide.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add documentation for LLVM CFI support 

This commit adds initial documentation for LLVM Control Flow Integrity
(CFI) support to the Rust compiler (see rust-lang/rust#89652 and
rust-lang/rust#89653).
This commit is contained in:
Ramon de C Valle 2021-10-14 15:52:44 -07:00 committed by Joshua Nelson
parent b06008731a
commit 68dbb4501d
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/sanitizers.md
View File

@ -5,6 +5,8 @@ The rustc compiler contains support for following sanitizers:
* [AddressSanitizer][clang-asan] a faster memory error detector. Can * [AddressSanitizer][clang-asan] a faster memory error detector. Can
detect out-of-bounds access to heap, stack, and globals, use after free, use detect out-of-bounds access to heap, stack, and globals, use after free, use
after return, double free, invalid free, memory leaks. after return, double free, invalid free, memory leaks.
* [ControlFlowIntegrity][clang-cfi] LLVM Control Flow Integrity (CFI) provides
forward-edge control flow protection.
* [Hardware-assisted AddressSanitizer][clang-hwasan] a tool similar to * [Hardware-assisted AddressSanitizer][clang-hwasan] a tool similar to
AddressSanitizer but based on partial hardware assistance. AddressSanitizer but based on partial hardware assistance.
* [LeakSanitizer][clang-lsan] a run-time memory leak detector. * [LeakSanitizer][clang-lsan] a run-time memory leak detector.
@ -14,15 +16,16 @@ The rustc compiler contains support for following sanitizers:
## How to use the sanitizers? ## How to use the sanitizers?
To enable a sanitizer compile with `-Z sanitizer=...` option, where value is one To enable a sanitizer compile with `-Z sanitizer=...` option, where value is one
of `address`, `hwaddress`, `leak`, `memory` or `thread`. For more details on how of `address`, `cfi`, `hwaddress`, `leak`, `memory` or `thread`. For more details
to use sanitizers please refer to the sanitizer flag in [the unstable on how to use sanitizers please refer to the sanitizer flag in [the unstable
book](https://doc.rust-lang.org/unstable-book/). book](https://doc.rust-lang.org/unstable-book/).
## How are sanitizers implemented in rustc? ## How are sanitizers implemented in rustc?
The implementation of sanitizers relies almost entirely on LLVM. The rustc is The implementation of sanitizers (except CFI) relies almost entirely on LLVM.
an integration point for LLVM compile time instrumentation passes and runtime The rustc is an integration point for LLVM compile time instrumentation passes
libraries. Highlight of the most important aspects of the implementation: and runtime libraries. Highlight of the most important aspects of the
implementation:
* The sanitizer runtime libraries are part of the [compiler-rt] project, and * The sanitizer runtime libraries are part of the [compiler-rt] project, and
[will be built][sanitizer-build] on [supported targets][sanitizer-targets] [will be built][sanitizer-build] on [supported targets][sanitizer-targets]
@ -104,12 +107,14 @@ To enable a sanitizer on a new target which is already supported by LLVM:
* [Sanitizers project page](https://github.com/google/sanitizers/wiki/) * [Sanitizers project page](https://github.com/google/sanitizers/wiki/)
* [AddressSanitizer in Clang][clang-asan] * [AddressSanitizer in Clang][clang-asan]
* [ControlFlowIntegrity in Clang][clang-cfi]
* [Hardware-assisted AddressSanitizer][clang-hwasan] * [Hardware-assisted AddressSanitizer][clang-hwasan]
* [LeakSanitizer in Clang][clang-lsan] * [LeakSanitizer in Clang][clang-lsan]
* [MemorySanitizer in Clang][clang-msan] * [MemorySanitizer in Clang][clang-msan]
* [ThreadSanitizer in Clang][clang-tsan] * [ThreadSanitizer in Clang][clang-tsan]
[clang-asan]: https://clang.llvm.org/docs/AddressSanitizer.html [clang-asan]: https://clang.llvm.org/docs/AddressSanitizer.html
[clang-cfi]: https://clang.llvm.org/docs/ControlFlowIntegrity.html
[clang-hwasan]: https://clang.llvm.org/docs/HardwareAssistedAddressSanitizerDesign.html [clang-hwasan]: https://clang.llvm.org/docs/HardwareAssistedAddressSanitizerDesign.html
[clang-lsan]: https://clang.llvm.org/docs/LeakSanitizer.html [clang-lsan]: https://clang.llvm.org/docs/LeakSanitizer.html
[clang-msan]: https://clang.llvm.org/docs/MemorySanitizer.html [clang-msan]: https://clang.llvm.org/docs/MemorySanitizer.html