90387a5b41
FD (file descriptor) is widely used in system software development, and almost all implementations of posix os (including nuttx) use FD as an index. the value of fd needs to be allocated starting from the minimum available value of 3, and each process has a copy, so the same fd value is very easy to reuse in the program. In multi threaded or multi process environments without address isolation, If the ownership, global variables, and competition relationships of fd are not properly handled, there may be issues with fd duplication or accidental closure. Further leading to the following issues, which are difficult to troubleshoot. 1. Security vulnerability: the fd we wrote is not the expected fd and will be accessed by hackers to obtain data 2. Program exceptions or crashes: write or read fd failures, and program logic errors 3. The structured file XML or database is damaged: the data format written to the database is not the expected format. The implementation principle of fdsan is based on the implementation of Android https://android.googlesource.com/platform/bionic/+/master/docs/fdsan.md Signed-off-by: hujun5 <hujun5@xiaomi.com>
78 lines
2.4 KiB
Plaintext
78 lines
2.4 KiB
Plaintext
############################################################################
|
|
# libs/libc/misc/Make.defs
|
|
#
|
|
# Licensed to the Apache Software Foundation (ASF) under one or more
|
|
# contributor license agreements. See the NOTICE file distributed with
|
|
# this work for additional information regarding copyright ownership. The
|
|
# ASF licenses this file to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance with the
|
|
# License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
############################################################################
|
|
|
|
# Add the internal C files to the build
|
|
|
|
CSRCS += lib_mknod.c lib_umask.c lib_utsname.c lib_getrandom.c
|
|
CSRCS += lib_xorshift128.c lib_tea_encrypt.c lib_tea_decrypt.c
|
|
CSRCS += lib_cxx_initialize.c lib_impure.c lib_memfd.c lib_mutex.c
|
|
CSRCS += lib_fchmodat.c lib_fstatat.c lib_getfullpath.c lib_openat.c
|
|
CSRCS += lib_mkdirat.c lib_utimensat.c
|
|
|
|
# Support for platforms that do not have long long types
|
|
|
|
CSRCS += lib_umul32.c lib_umul64.c lib_umul32x64.c
|
|
CSRCS += lib_uadd32x64.c lib_uadd64.c lib_usub64x32.c lib_usub64.c
|
|
|
|
ifeq ($(CONFIG_PIPES),y)
|
|
CSRCS += lib_mkfifo.c
|
|
endif
|
|
|
|
# Add the miscellaneous C files to the build
|
|
|
|
CSRCS += lib_dumpbuffer.c lib_dumpvbuffer.c lib_fnmatch.c lib_debug.c
|
|
CSRCS += lib_crc64.c lib_crc32.c lib_crc16.c lib_crc16ccitt.c lib_crc8.c
|
|
CSRCS += lib_crc8ccitt.c lib_crc8table.c lib_glob.c lib_execinfo.c
|
|
CSRCS += lib_ftok.c lib_err.c
|
|
|
|
# Keyboard driver encoder/decoder
|
|
|
|
ifeq ($(CONFIG_LIBC_KBDCODEC),y)
|
|
CSRCS += lib_kbdencode.c lib_kbddecode.c
|
|
endif
|
|
|
|
# SLCD driver encoder/decoder
|
|
|
|
ifeq ($(CONFIG_LIBC_SLCDCODEC),y)
|
|
CSRCS += lib_slcdencode.c lib_slcddecode.c
|
|
endif
|
|
|
|
# Environment search path support
|
|
|
|
ifeq ($(CONFIG_LIBC_ENVPATH),y)
|
|
CSRCS += lib_envpath.c
|
|
endif
|
|
|
|
# Fdsan support
|
|
|
|
ifeq ($(CONFIG_FDSAN),y)
|
|
CSRCS += lib_fdsan.c
|
|
endif
|
|
|
|
# To ensure uname information is newest,
|
|
# add lib_utsname.o to phony target for force rebuild
|
|
|
|
.PHONY: lib_utsname$(OBJEXT)
|
|
|
|
# Add the misc directory to the build
|
|
|
|
DEPPATH += --dep-path misc
|
|
VPATH += :misc
|