mirror of
https://github.com/systemd/systemd.git
synced 2024-12-22 17:35:35 +03:00
91ef65784e
This adds the following three options: - detect_invalid_pointer_pairs=2 - handle_ioctl=1 - print_cmdline=1 Note, these options were used in the CentOS CI job.
23 lines
1.2 KiB
Plaintext
23 lines
1.2 KiB
Plaintext
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
|
|
[Match]
|
|
Environment=SANITIZERS
|
|
Environment=!SANITIZERS=
|
|
|
|
[Build]
|
|
# Set verify_asan_link_order=0 to prevent ASAN warnings when building the image and make sure the real ASAN
|
|
# options are set when booting the image.
|
|
# Set intercept_tls_get_addr=0 to work around leak sanitizer segmentation fault in test-dlopen-so on CentOS
|
|
# Stream 9.
|
|
# TODO: Drop intercept_tls_get_addr=0 when we remove CentOS Stream 9 builds.
|
|
Environment=ASAN_OPTIONS=verify_asan_link_order=0:intercept_tls_get_addr=0
|
|
|
|
[Content]
|
|
# When modifying these also modify mkosi.extra/usr/lib/systemd/system.conf.d/10-sanitizers.conf. We don't use
|
|
# systemd.setenv here as there's a size limit on the kernel command line and we don't want to trigger it. We
|
|
# don't use ManagerEnvironment= either as we want these to be set for pid1 from the earliest possible moment.
|
|
KernelCommandLine=
|
|
ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:detect_invalid_pointer_pairs=2:handle_ioctl=1:print_cmdline=1:disable_coredump=0:use_madv_dontdump=1
|
|
UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1
|
|
LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions
|