mirror/zig
1
0
Fork 0
mirror of https://github.com/ziglang/zig.git synced 2025-12-24 15:13:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compilation: Use trapping UBSan if -fno-ubsan-rt is passed.

Browse Source 
This is a mitigation of #23216 meant only for 0.14.x.
This commit is contained in:
David Rubin 2025-04-11 21:37:01 +02:00 committed by Alex Rønne Petersen
parent 379f1c9fa0
commit d80cfa6f41
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/Compilation.zig
View File

@ -6053,7 +6053,9 @@ pub fn addCCArgs(
// function was called.
try argv.append("-fno-sanitize=function");
if (mod.optimize_mode == .ReleaseSafe) {
// If we want to sanitize C, but the ubsan runtime has been turned off,
// we'll switch to just trapping.
if (comp.ubsan_rt_strat == .none or mod.optimize_mode == .ReleaseSafe) {
// It's recommended to use the minimal runtime in production
// environments due to the security implications of the full runtime.
// The minimal runtime doesn't provide much benefit over simply