Enable Safe Stack for Baremetal?

Project Infrastructure LLVM Dev List Archives
#1

Hello,

I’m assessing the work required to enable Safe Stack for a bare metal target.

Looking at compiler-rt/lib/safestack/, the current implementation depends on thread support for mutex & storing unsafe stack pointer.

It also need several system calls: gettid, tgkill, mmap, munmap, mprotect.

Our target doesn’t has all underlying support it needs. My question is: what’s the minimum requirement to port Safe Stack to bare metal?

Thanks,

Zhaoshi

#2

Hello,

I’m assessing the work required to enable Safe Stack for a bare metal target.

Looking at compiler-rt/lib/safestack/, the current implementation depends on thread support for mutex & storing unsafe stack pointer.

It also need several system calls: gettid, tgkill, mmap, munmap, mprotect.

Our target doesn’t has all underlying support it needs. My question is: what’s the minimum requirement to port Safe Stack to bare metal?

Thanks,

Zhaoshi

#3

I also looked at shadow call stack and got myself very confused:

Why does is require common sanitizer support? so that it can be checked by clang that the only valid target is AArch64 when -fsanitize=shadow-call-stack is present?

Thanks,

Zhaoshi