Commit Graph

23663 Commits

Author SHA1 Message Date
Nick Kralevich
99d92506ac Add support for LOCAL_DETECT_INTEGER_OVERFLOWS
Add build system support for LOCAL_DETECT_INTEGER_OVERFLOWS. When enabled,
an attempt to perform an integer arithmetic operation which overflows
will result in a call to abort(). This is intended for security
sensitive code, where integer overflow operations are not expected
nor desirable.

Two classes of underflows/overflows are detected and blocked:

1) Signed integer underflow/overflow.
2) Unsigned integer underflow/overflows.

Signed integer overflows are undefined behavior, according to the
C standard. Unsigned integer overflows are defined behavior, but
still undesirable in security sensitive code.

Only clang is supported today. gcc has -ftrapv for handling signed
integer overflow, but it's widely considered broken
(https://gcc.gnu.org/bugzilla/show_bug.cgi?id=35412) and we're
deliberately avoiding it's use here.

Change-Id: Ib4918dc84e37e83d4205e5035544545d91671e5f
Vaguely-Related-Bug: 11859726
2015-06-15 14:52:09 -07:00
Dan Albert
7508a81d40 Fix libdl inclusion for default-ub.
We shouldn't be using ldlibs for target libraries because it doesn't
add a real dependency.

Change-Id: Ib1ec40b95356feb521e95674b64d04d5ecc06332
2015-06-15 11:39:29 -07:00
Dan Albert
8b36f7fcc7 am 2bb996f6: am 46cb2ee3: Merge "Force some clang Werrors that *will* break things."
* commit '2bb996f6a58dd4b9e682f9c59a7dad94412bdd86':
  Force some clang Werrors that *will* break things.
2015-06-13 02:25:20 +00:00
Jeff Vander Stoep
ccf993ec0c am 5aa6832e: selinux: add tools to dev path
* commit '5aa6832e6b5dc4274066346f4dbab93c17145577':
  selinux: add tools to dev path
2015-06-12 20:19:36 +00:00
Jeff Vander Stoep
e50b3ec5f8 am f9af2646: am ed6e4d19: Merge "selinux: add tools to dev path"
* commit 'f9af26462fe9dd7c68ca49a8b5b148f00d4ea3ec':
  selinux: add tools to dev path
2015-06-12 20:05:32 +00:00
Jeff Vander Stoep
5aa6832e6b selinux: add tools to dev path
Adds audit2allow to the path. No build required.

(cherry picked from 5f50f05340)
Bug: 21724977
Change-Id: Ide320a56b9cdbfa426b978443f6df07fa2a38fbc
2015-06-12 20:02:25 +00:00
Dan Albert
2bb996f6a5 am 46cb2ee3: Merge "Force some clang Werrors that *will* break things."
* commit '46cb2ee3cb120a1c03241e9e2aa66d76c890c486':
  Force some clang Werrors that *will* break things.
2015-06-12 19:59:13 +00:00
Dan Albert
46cb2ee3cb Merge "Force some clang Werrors that *will* break things." 2015-06-12 19:52:20 +00:00
Tim Murray
76b604b308 am b461acde: Merge "Add support for cortex-a53 variants when building 64-bit." into mnc-dev
* commit 'b461acdedbc9a13b6f245138d8e454d93d4ca9de':
  Add support for cortex-a53 variants when building 64-bit.
2015-06-12 19:03:31 +00:00
Tim Murray
b461acdedb Merge "Add support for cortex-a53 variants when building 64-bit." into mnc-dev 2015-06-12 18:37:11 +00:00
C. Sean Young
3c11468252 am 6f44670a: am cbaead4c: am 540772fa: am cf469989: Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
* commit '6f44670ada093f4a11a343dddf0f8d0a0a8280d6':
  Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
2015-06-12 18:05:03 +00:00
Jeff Vander Stoep
f9af26462f am ed6e4d19: Merge "selinux: add tools to dev path"
* commit 'ed6e4d1933cc0a68cd2eb3b7a83d5f0ccefac553':
  selinux: add tools to dev path
2015-06-12 17:44:49 +00:00
C. Sean Young
6f44670ada am cbaead4c: am 540772fa: am cf469989: Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
* commit 'cbaead4cfe737c96c649672b6c1396c35597b5b7':
  Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
2015-06-12 17:43:46 +00:00
Jeff Vander Stoep
ed6e4d1933 Merge "selinux: add tools to dev path" 2015-06-12 17:37:24 +00:00
Jeff Vander Stoep
5f50f05340 selinux: add tools to dev path
Adds audit2allow to the path. No build required.

Bug: 21724977
Change-Id: Ide320a56b9cdbfa426b978443f6df07fa2a38fbc
2015-06-12 10:16:06 -07:00
C. Sean Young
cbaead4cfe am 540772fa: am cf469989: Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
* commit '540772fa2287e63a0c745229fb72b78903c9cd70':
  Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
2015-06-12 16:29:25 +00:00
Tim Murray
b6b20af512 Add support for cortex-a53 variants when building 64-bit.
Change-Id: I3f1fb5dbde731d9c3d6db26a46bc7f0f54d8e071
2015-06-11 16:02:13 -07:00
Tao Bao
05451045c9 am abfe1044: Merge "Support SELinux context label when mounting" into mnc-dev
* commit 'abfe10440836f4bbd513b83cf731788099dd81b4':
  Support SELinux context label when mounting
2015-06-11 02:08:14 +00:00
Dan Albert
d160041149 Force some clang Werrors that *will* break things.
Clang is really aggressive at optimizing a handful of cases (read:
clang will ruin your day some if you write bad code). Fortunately, it
also emits a warning when it's about to do this.

To prevent anyone from suffering from these optimizations, make these
warnings errors and make them impossible to disable.

Change-Id: I5e10bb0fc2ca23190017da716b3b84635577a0bd
2015-06-10 17:24:38 -07:00
Adrian Roos
3986d504d6 am 6784cae4: Switch build to stricter aapt symbol generation
* commit '6784cae413a757fc5516cfc344eaf435c6113170':
  Switch build to stricter aapt symbol generation
2015-06-10 23:17:31 +00:00
Tao Bao
abfe104408 Merge "Support SELinux context label when mounting" into mnc-dev 2015-06-10 23:08:46 +00:00
Tao Bao
548eb76c8f Support SELinux context label when mounting
If there is a SELinux context label in the recovery.fstab, we should
honor that when mounting the partition.

Bug: 19764039
Change-Id: I4df71a092b418cd340a18b2e3b0936de33d8e3f5
2015-06-10 15:35:34 -07:00
Adrian Roos
6784cae413 Switch build to stricter aapt symbol generation
Prevents aapt from generating java symbols for strings that don't have
a default localization.

Bug: 21537397
Change-Id: I2f17397e33d823045f7dcff02e3d0817f3f81849
2015-06-10 20:00:13 +00:00
C. Sean Young
540772fa22 am cf469989: Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
* commit 'cf4699895ad99b83a24e376007750e2c2c0502f6':
  Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
2015-06-10 18:38:46 +00:00
C. Sean Young
cf4699895a Add new variable SCAN_EXCLUDE_DIRS; specifies directories to exclude when searching source tree.
These directories are excluded in addition to OUT_DIR.
This can be useful if your build system has other output directories
beyond what OUT_DIR is set to.

Change-Id: I6d98a85bcc8c89279e939406a7fec32547e8922f
2015-06-10 13:00:13 -05:00
Baligh Uddin
d80f08688c am 942a42e3: Merge "Allow custom boot_signer and verity_signer." into mnc-dev
* commit '942a42e31de9a0468014a256ed7fdd67cb208e64':
  Allow custom boot_signer and verity_signer.
2015-06-09 23:28:07 +00:00
Baligh Uddin
942a42e31d Merge "Allow custom boot_signer and verity_signer." into mnc-dev 2015-06-09 23:00:59 +00:00
Baligh Uddin
601ddeae06 Allow custom boot_signer and verity_signer.
Bug: 21701163
Change-Id: I85e75fd3a166a9f6a7859ebf81dee73322dc2798
2015-06-09 15:48:14 -07:00
Claes Elgemark
f49cd4b449 am b5cd1f03: Add missing shared libraries to dist tools
* commit 'b5cd1f03c2e722112526b4abdd9b3299364c7788':
  Add missing shared libraries to dist tools
2015-06-09 17:02:47 +00:00
Ying Wang
616f5707a3 am 740dee5a: am 1b96592a: Merge "Add build_verity_metadata.py to dist-tools"
* commit '740dee5a5626724051883b6f9c9a7df511b65b29':
  Add build_verity_metadata.py to dist-tools
2015-06-09 16:41:29 +00:00
Ying Wang
740dee5a56 am 1b96592a: Merge "Add build_verity_metadata.py to dist-tools"
* commit '1b96592aab7a8e3d357a4e09f685968edcfe05b9':
  Add build_verity_metadata.py to dist-tools
2015-06-09 16:32:52 +00:00
Ying Wang
1b96592aab Merge "Add build_verity_metadata.py to dist-tools" 2015-06-09 16:20:49 +00:00
Claes Elgemark
b5cd1f03c2 Add missing shared libraries to dist tools
(cherry pick from d0ec665727)

Add missing libraries used by e2fsck and build_verity_tree.

Change-Id: I8bf0341300863ef0090b395b2aba0b7a952f6b58
2015-06-09 09:16:27 -07:00
Narayan Kamath
ff321c9161 am 4cdb0d34: am 7d2c71cf: Merge "Remove duplicate CTS tests from libcore cts packages."
* commit '4cdb0d34395bef9828e38fca6281603dd784de84':
  Remove duplicate CTS tests from libcore cts packages.
2015-06-09 10:23:07 +00:00
Narayan Kamath
4cdb0d3439 am 7d2c71cf: Merge "Remove duplicate CTS tests from libcore cts packages."
* commit '7d2c71cf90cc8da55c8b8faad5910267c23ae542':
  Remove duplicate CTS tests from libcore cts packages.
2015-06-09 10:12:12 +00:00
Narayan Kamath
7d2c71cf90 Merge "Remove duplicate CTS tests from libcore cts packages." 2015-06-09 10:03:16 +00:00
Narayan Kamath
6ca9b2b1a3 Remove duplicate CTS tests from libcore cts packages.
The catch all "org" package was catching several thousand
org.apache.harmony.tests.* tests that are already covered by
other packages. Replace the catch-all org.* with specific prefixes.

Needs additional support in CollectAllTests to handle multiple
prefixes. This is implemented in the companion change.

bug: 20862863

(cherry picked from commit cf7fbcd03d)

Change-Id: I1d28f91cfca098ccdcd62e88bb486b433d9c29d8
2015-06-09 10:52:34 +01:00
Mark Salyzyn
6d69751916 am 5ced4018: am 911637bf: Merge "Add missing shared libraries to dist tools"
* commit '5ced401874da219d66077f7a85c939594624ae0c':
  Add missing shared libraries to dist tools
2015-06-09 00:15:53 +00:00
Ying Wang
bae01ccd97 am 18e98163: am 8e42131b: Merge "Strip path from verity_signer_cmd in the target-files meta data."
* commit '18e981638d77af502a42895fbb37bc80e3642283':
  Strip path from verity_signer_cmd in the target-files meta data.
2015-06-09 00:01:03 +00:00
Mark Salyzyn
5ced401874 am 911637bf: Merge "Add missing shared libraries to dist tools"
* commit '911637bf33b2f8994fc93eb8ea6e4a8428122e13':
  Add missing shared libraries to dist tools
2015-06-09 00:00:37 +00:00
Mark Salyzyn
911637bf33 Merge "Add missing shared libraries to dist tools" 2015-06-08 23:51:33 +00:00
Ying Wang
18e981638d am 8e42131b: Merge "Strip path from verity_signer_cmd in the target-files meta data."
* commit '8e42131ba2aa4fd12395e2c122ab62c9991e6f72':
  Strip path from verity_signer_cmd in the target-files meta data.
2015-06-08 23:48:24 +00:00
Ying Wang
8e42131ba2 Merge "Strip path from verity_signer_cmd in the target-files meta data." 2015-06-08 23:40:01 +00:00
Ying Wang
bc0f1f5651 am ac3f88d8: am 080f57ae: Merge "Remove the unnecessary full_x86_64 and full_mips64."
* commit 'ac3f88d8a2812cd2134f9b67ec4a928d886a4eb6':
  Remove the unnecessary full_x86_64 and full_mips64.
2015-06-08 20:08:09 +00:00
Ying Wang
ac3f88d8a2 am 080f57ae: Merge "Remove the unnecessary full_x86_64 and full_mips64."
* commit '080f57aed7ac0f03c5db216dafe5023b032525ed':
  Remove the unnecessary full_x86_64 and full_mips64.
2015-06-08 19:15:13 +00:00
Ying Wang
080f57aed7 Merge "Remove the unnecessary full_x86_64 and full_mips64." 2015-06-08 19:01:47 +00:00
Ying Wang
0a76df5ce7 Remove the unnecessary full_x86_64 and full_mips64.
For historical reason, the aosp_* products were named full_*.
We keep the full, full_x86 and full_mips in case some tools still
reference these legacy names; But no reason the have the full_* product
names for the new 64-bit archs.

Change-Id: I240ed0c6ded0ded2d80603bd0c5ff24750999afc
2015-06-08 11:57:26 -07:00
Claes Elgemark
82a19d3662 Add build_verity_metadata.py to dist-tools
Preserve path as it is referenced by build_image.py.

Change-Id: Id6833d243b5a15b4ee5e0013340aeb2cd35f3578
2015-06-05 10:31:53 +02:00
Luan Nguyen
c4c51746cb am 18985e76: am 30b16ac6: am 95a1818f: Merge "docs: Add styles for embedded videos to match DevSite" into mnc-preview-docs
* commit '18985e76617fefab2d9bf480c99994e1e9ba9143':
  docs: Add styles for embedded videos to match DevSite
2015-06-05 02:50:18 +00:00
Luan Nguyen
18985e7661 am 30b16ac6: am 95a1818f: Merge "docs: Add styles for embedded videos to match DevSite" into mnc-preview-docs
* commit '30b16ac6a4d4658d927d48476081de7542b5989f':
  docs: Add styles for embedded videos to match DevSite
2015-06-05 02:27:29 +00:00