2019-08-18 11:58:23 +05:30
|
|
|
CONFIG_WERROR := true
|
2018-10-29 08:01:46 +05:30
|
|
|
CONFIG_NATIVE := true
|
2018-09-19 23:27:35 +05:30
|
|
|
CONFIG_CXX_ALLOCATOR := true
|
2018-10-15 04:28:54 +05:30
|
|
|
CONFIG_UBSAN := false
|
2018-10-20 06:59:40 +05:30
|
|
|
CONFIG_SEAL_METADATA := false
|
2018-12-09 21:32:53 +05:30
|
|
|
CONFIG_ZERO_ON_FREE := true
|
2018-11-03 07:05:09 +05:30
|
|
|
CONFIG_WRITE_AFTER_FREE_CHECK := true
|
|
|
|
CONFIG_SLOT_RANDOMIZE := true
|
|
|
|
CONFIG_SLAB_CANARY := true
|
2019-01-03 01:29:19 +05:30
|
|
|
CONFIG_SLAB_QUARANTINE_RANDOM_LENGTH := 1
|
|
|
|
CONFIG_SLAB_QUARANTINE_QUEUE_LENGTH := 1
|
2018-09-16 22:56:59 +05:30
|
|
|
CONFIG_EXTENDED_SIZE_CLASSES := true
|
2019-04-07 17:34:06 +05:30
|
|
|
CONFIG_LARGE_SIZE_CLASSES := true
|
2018-11-17 01:55:35 +05:30
|
|
|
CONFIG_GUARD_SLABS_INTERVAL := 1
|
|
|
|
CONFIG_GUARD_SIZE_DIVISOR := 2
|
2019-01-03 00:10:02 +05:30
|
|
|
CONFIG_REGION_QUARANTINE_RANDOM_LENGTH := 128
|
|
|
|
CONFIG_REGION_QUARANTINE_QUEUE_LENGTH := 1024
|
2018-12-05 19:53:05 +05:30
|
|
|
CONFIG_REGION_QUARANTINE_SKIP_THRESHOLD := 33554432 # 32MiB
|
2019-01-03 00:10:02 +05:30
|
|
|
CONFIG_FREE_SLABS_QUARANTINE_RANDOM_LENGTH := 32
|
2019-06-19 10:30:22 +05:30
|
|
|
CONFIG_CLASS_REGION_SIZE := 34359738368 # 32GiB
|
2019-04-10 17:42:59 +05:30
|
|
|
CONFIG_N_ARENA := 4
|
2019-04-07 06:19:52 +05:30
|
|
|
CONFIG_STATS := false
|
2018-09-19 23:27:35 +05:30
|
|
|
|
2018-10-23 16:53:07 +05:30
|
|
|
define safe_flag
|
2019-08-18 10:44:45 +05:30
|
|
|
$(shell $(CC) $(if $(filter clang,$(CC)),-Werror=unknown-warning-option) -E $1 - </dev/null >/dev/null 2>&1 && echo $1 || echo $2)
|
2018-10-23 16:53:07 +05:30
|
|
|
endef
|
|
|
|
|
2020-09-14 15:22:53 +05:30
|
|
|
CPPFLAGS := $(CPPFLAGS) -D_GNU_SOURCE -I include
|
2019-08-18 18:11:12 +05:30
|
|
|
SHARED_FLAGS := -O3 -flto -fPIC -fvisibility=hidden $(call safe_flag,-fno-plt) \
|
|
|
|
$(call safe_flag,-fstack-clash-protection) -fstack-protector-strong -pipe -Wall -Wextra \
|
|
|
|
$(call safe_flag,-Wcast-align=strict,-Wcast-align) -Wcast-qual -Wwrite-strings
|
2018-10-29 08:01:46 +05:30
|
|
|
|
2020-05-01 02:06:47 +05:30
|
|
|
ifeq ($(CC),clang)
|
|
|
|
SHARED_FLAGS += -Wno-constant-logical-operand
|
|
|
|
endif
|
|
|
|
|
2019-08-18 11:58:23 +05:30
|
|
|
ifeq ($(CONFIG_WERROR),true)
|
|
|
|
SHARED_FLAGS += -Werror
|
|
|
|
endif
|
|
|
|
|
2018-10-29 08:01:46 +05:30
|
|
|
ifeq ($(CONFIG_NATIVE),true)
|
|
|
|
SHARED_FLAGS += -march=native
|
|
|
|
endif
|
|
|
|
|
2019-07-29 23:22:55 +05:30
|
|
|
CFLAGS := $(CFLAGS) -std=c11 $(SHARED_FLAGS) -Wmissing-prototypes
|
2019-09-27 00:20:58 +05:30
|
|
|
CXXFLAGS := $(CXXFLAGS) $(call safe_flag,-std=c++17,-std=c++14) $(SHARED_FLAGS)
|
2019-07-29 23:22:55 +05:30
|
|
|
LDFLAGS := $(LDFLAGS) -Wl,--as-needed,-z,defs,-z,relro,-z,now,-z,nodlopen,-z,text
|
2018-10-15 04:03:40 +05:30
|
|
|
|
2018-12-05 12:51:28 +05:30
|
|
|
SOURCES := chacha.c h_malloc.c memory.c pages.c random.c util.c
|
2018-10-15 03:31:40 +05:30
|
|
|
OBJECTS := $(SOURCES:.c=.o)
|
2018-08-22 00:53:22 +05:30
|
|
|
|
2018-09-19 23:27:35 +05:30
|
|
|
ifeq ($(CONFIG_CXX_ALLOCATOR),true)
|
2019-08-18 10:57:02 +05:30
|
|
|
# make sure LTO is compatible in case CC and CXX don't match (such as clang and g++)
|
|
|
|
CXX := $(CC)
|
2019-08-18 14:23:51 +05:30
|
|
|
LDLIBS += -lstdc++ -lgcc_s
|
2019-08-18 10:57:02 +05:30
|
|
|
|
2018-10-15 03:31:40 +05:30
|
|
|
SOURCES += new.cc
|
2018-09-19 23:27:35 +05:30
|
|
|
OBJECTS += new.o
|
|
|
|
endif
|
|
|
|
|
2018-10-15 04:28:54 +05:30
|
|
|
ifeq ($(CONFIG_UBSAN),true)
|
2019-08-18 11:29:48 +05:30
|
|
|
CFLAGS += -fsanitize=undefined -fno-sanitize-recover=undefined
|
|
|
|
CXXFLAGS += -fsanitize=undefined -fno-sanitize-recover=undefined
|
2018-10-15 04:28:54 +05:30
|
|
|
endif
|
|
|
|
|
2019-08-18 11:26:20 +05:30
|
|
|
ifeq (,$(filter $(CONFIG_SEAL_METADATA),true false))
|
|
|
|
$(error CONFIG_SEAL_METADATA must be true or false)
|
2018-10-20 06:59:40 +05:30
|
|
|
endif
|
|
|
|
|
2018-11-03 07:05:09 +05:30
|
|
|
ifeq (,$(filter $(CONFIG_ZERO_ON_FREE),true false))
|
|
|
|
$(error CONFIG_ZERO_ON_FREE must be true or false)
|
|
|
|
endif
|
|
|
|
|
|
|
|
ifeq (,$(filter $(CONFIG_WRITE_AFTER_FREE_CHECK),true false))
|
|
|
|
$(error CONFIG_WRITE_AFTER_FREE_CHECK must be true or false)
|
|
|
|
endif
|
|
|
|
|
|
|
|
ifeq (,$(filter $(CONFIG_SLOT_RANDOMIZE),true false))
|
|
|
|
$(error CONFIG_SLOT_RANDOMIZE must be true or false)
|
|
|
|
endif
|
|
|
|
|
|
|
|
ifeq (,$(filter $(CONFIG_SLAB_CANARY),true false))
|
|
|
|
$(error CONFIG_SLAB_CANARY must be true or false)
|
|
|
|
endif
|
|
|
|
|
2018-09-16 22:56:59 +05:30
|
|
|
ifeq (,$(filter $(CONFIG_EXTENDED_SIZE_CLASSES),true false))
|
|
|
|
$(error CONFIG_EXTENDED_SIZE_CLASSES must be true or false)
|
|
|
|
endif
|
|
|
|
|
2019-04-07 17:34:06 +05:30
|
|
|
ifeq (,$(filter $(CONFIG_LARGE_SIZE_CLASSES),true false))
|
|
|
|
$(error CONFIG_LARGE_SIZE_CLASSES must be true or false)
|
|
|
|
endif
|
|
|
|
|
2019-04-07 18:36:03 +05:30
|
|
|
ifeq (,$(filter $(CONFIG_STATS),true false))
|
|
|
|
$(error CONFIG_STATS must be true or false)
|
|
|
|
endif
|
|
|
|
|
2018-11-03 07:05:09 +05:30
|
|
|
CPPFLAGS += \
|
2019-08-18 11:26:20 +05:30
|
|
|
-DCONFIG_SEAL_METADATA=$(CONFIG_SEAL_METADATA) \
|
2018-11-03 07:05:09 +05:30
|
|
|
-DZERO_ON_FREE=$(CONFIG_ZERO_ON_FREE) \
|
|
|
|
-DWRITE_AFTER_FREE_CHECK=$(CONFIG_WRITE_AFTER_FREE_CHECK) \
|
|
|
|
-DSLOT_RANDOMIZE=$(CONFIG_SLOT_RANDOMIZE) \
|
2018-11-17 01:55:35 +05:30
|
|
|
-DSLAB_CANARY=$(CONFIG_SLAB_CANARY) \
|
2019-01-03 00:10:02 +05:30
|
|
|
-DSLAB_QUARANTINE_RANDOM_LENGTH=$(CONFIG_SLAB_QUARANTINE_RANDOM_LENGTH) \
|
|
|
|
-DSLAB_QUARANTINE_QUEUE_LENGTH=$(CONFIG_SLAB_QUARANTINE_QUEUE_LENGTH) \
|
2018-09-16 22:56:59 +05:30
|
|
|
-DCONFIG_EXTENDED_SIZE_CLASSES=$(CONFIG_EXTENDED_SIZE_CLASSES) \
|
2019-04-07 17:34:06 +05:30
|
|
|
-DCONFIG_LARGE_SIZE_CLASSES=$(CONFIG_LARGE_SIZE_CLASSES) \
|
2018-11-17 01:55:35 +05:30
|
|
|
-DGUARD_SLABS_INTERVAL=$(CONFIG_GUARD_SLABS_INTERVAL) \
|
|
|
|
-DGUARD_SIZE_DIVISOR=$(CONFIG_GUARD_SIZE_DIVISOR) \
|
2019-01-03 00:10:02 +05:30
|
|
|
-DREGION_QUARANTINE_RANDOM_LENGTH=$(CONFIG_REGION_QUARANTINE_RANDOM_LENGTH) \
|
|
|
|
-DREGION_QUARANTINE_QUEUE_LENGTH=$(CONFIG_REGION_QUARANTINE_QUEUE_LENGTH) \
|
2018-11-17 01:55:35 +05:30
|
|
|
-DREGION_QUARANTINE_SKIP_THRESHOLD=$(CONFIG_REGION_QUARANTINE_SKIP_THRESHOLD) \
|
2019-01-03 00:10:02 +05:30
|
|
|
-DFREE_SLABS_QUARANTINE_RANDOM_LENGTH=$(CONFIG_FREE_SLABS_QUARANTINE_RANDOM_LENGTH) \
|
2019-03-26 00:19:50 +05:30
|
|
|
-DCONFIG_CLASS_REGION_SIZE=$(CONFIG_CLASS_REGION_SIZE) \
|
2019-04-07 06:19:52 +05:30
|
|
|
-DN_ARENA=$(CONFIG_N_ARENA) \
|
2019-04-07 18:36:03 +05:30
|
|
|
-DCONFIG_STATS=$(CONFIG_STATS)
|
2018-11-03 07:05:09 +05:30
|
|
|
|
2018-12-05 12:35:37 +05:30
|
|
|
libhardened_malloc.so: $(OBJECTS)
|
2018-08-22 00:53:22 +05:30
|
|
|
$(CC) $(CFLAGS) $(LDFLAGS) -shared $^ $(LDLIBS) -o $@
|
|
|
|
|
2018-10-07 20:58:50 +05:30
|
|
|
chacha.o: chacha.c chacha.h util.h
|
2020-09-14 15:22:53 +05:30
|
|
|
h_malloc.o: h_malloc.c include/h_malloc.h mutex.h memory.h pages.h random.h util.h
|
2018-08-29 10:23:12 +05:30
|
|
|
memory.o: memory.c memory.h util.h
|
2020-09-14 15:22:53 +05:30
|
|
|
new.o: new.cc include/h_malloc.h util.h
|
2018-09-02 11:33:27 +05:30
|
|
|
pages.o: pages.c pages.h memory.h util.h
|
2018-08-26 08:30:00 +05:30
|
|
|
random.o: random.c random.h chacha.h util.h
|
2018-08-22 00:53:22 +05:30
|
|
|
util.o: util.c util.h
|
|
|
|
|
2019-08-18 11:49:51 +05:30
|
|
|
check: tidy
|
|
|
|
|
2018-10-15 03:31:40 +05:30
|
|
|
tidy:
|
2019-08-18 11:42:18 +05:30
|
|
|
clang-tidy $(SOURCES) -- $(CPPFLAGS)
|
2018-10-15 03:31:40 +05:30
|
|
|
|
2018-08-22 00:53:22 +05:30
|
|
|
clean:
|
2018-12-05 12:35:37 +05:30
|
|
|
rm -f libhardened_malloc.so $(OBJECTS)
|
2018-10-15 03:31:40 +05:30
|
|
|
|
2020-03-31 05:06:11 +05:30
|
|
|
test: libhardened_malloc.so
|
|
|
|
make -C test/
|
|
|
|
-python -m unittest discover --start-directory test/
|
|
|
|
|
|
|
|
.PHONY: check clean tidy test
|