mirror of
				https://github.com/rust-lang/rust.git
				synced 2025-11-04 06:56:14 +00:00 
			
		
		
		
	This commit adds cross-language LLVM Control Flow Integrity (CFI) support to the Rust compiler by adding the `-Zsanitizer-cfi-normalize-integers` option to be used with Clang `-fsanitize-cfi-icall-normalize-integers` for normalizing integer types (see https://reviews.llvm.org/D139395). It provides forward-edge control flow protection for C or C++ and Rust -compiled code "mixed binaries" (i.e., for when C or C++ and Rust -compiled code share the same virtual address space). For more information about LLVM CFI and cross-language LLVM CFI support for the Rust compiler, see design document in the tracking issue #89653. Cross-language LLVM CFI can be enabled with -Zsanitizer=cfi and -Zsanitizer-cfi-normalize-integers, and requires proper (i.e., non-rustc) LTO (i.e., -Clinker-plugin-lto).
		
			
				
	
	
		
			20 lines
		
	
	
		
			826 B
		
	
	
	
		
			Rust
		
	
	
	
	
	
			
		
		
	
	
			20 lines
		
	
	
		
			826 B
		
	
	
	
		
			Rust
		
	
	
	
	
	
// Verifies that pointer type membership tests for indirect calls are emitted.
 | 
						|
//
 | 
						|
// needs-sanitizer-cfi
 | 
						|
// compile-flags: -Clto -Cno-prepopulate-passes -Ctarget-feature=-crt-static -Zsanitizer=cfi -Copt-level=0
 | 
						|
 | 
						|
#![crate_type="lib"]
 | 
						|
 | 
						|
pub fn foo(f: fn(i32) -> i32, arg: i32) -> i32 {
 | 
						|
    // CHECK-LABEL: define{{.*}}foo{{.*}}!type !{{[0-9]+}} !type !{{[0-9]+}} !type !{{[0-9]+}} !type !{{[0-9]+}}
 | 
						|
    // CHECK:       start:
 | 
						|
    // CHECK:       [[TT:%.+]] = call i1 @llvm.type.test({{i8\*|ptr}} {{%f|%0}}, metadata !"{{[[:print:]]+}}")
 | 
						|
    // CHECK-NEXT:  br i1 [[TT]], label %type_test.pass, label %type_test.fail
 | 
						|
    // CHECK:       type_test.pass:
 | 
						|
    // CHECK-NEXT:  {{%.+}} = call i32 %f(i32 %arg)
 | 
						|
    // CHECK:       type_test.fail:
 | 
						|
    // CHECK-NEXT:  call void @llvm.trap()
 | 
						|
    // CHECK-NEXT:  unreachable
 | 
						|
    f(arg)
 | 
						|
}
 |