Kees Cook be58f71037 fortify: Add compile-time FORTIFY_SOURCE tests ... While the run-time testing of FORTIFY_SOURCE is already present in LKDTM, there is no testing of the expected compile-time detections. In preparation for correctly supporting FORTIFY_SOURCE under Clang, adding additional FORTIFY_SOURCE defenses, and making sure FORTIFY_SOURCE doesn't silently regress with GCC, introduce a build-time test suite that checks each expected compile-time failure condition. As this is relatively backwards from standard build rules in the sense that a successful test is actually a compile _failure_, create a wrapper script to check for the correct errors, and wire it up as a dummy dependency to lib/string.o, collecting the results into a log file artifact. Signed-off-by: Kees Cook <keescook@chromium.org>		2021-10-18 12:28:52 -07:00
..
atomic	locking/atomic: add arch_atomic_long*()	2021-07-16 18:46:45 +02:00
basic
clang-tools	gen_compile_commands: fix missing 'sys' package	2021-09-19 10:13:03 +09:00
coccinelle	scripts: coccinelle: allow list_entry_is_head() to use pos	2021-08-08 22:00:49 +02:00
dtc
dummy-tools
gcc-plugins	scripts: make some scripts executable	2021-08-10 09:13:25 +09:00
gdb
genksyms
kconfig	scripts: merge_config: add strict mode to fail upon any redefinition	2021-08-10 08:23:39 +09:00
ksymoops
mod	Kbuild updates for v5.15	2021-09-03 15:33:47 -07:00
package
selinux
tracing	scripts/tracing: fix the bug that can't parse raw_trace_func	2021-08-04 17:49:26 -04:00
.gitignore
adjust_autoksyms.sh	kbuild: redo fake deps at include/ksym/*.h	2021-09-03 08:17:21 +09:00
as-version.sh	kbuild: Switch to 'f' variants of integrated assembler flag	2021-09-03 08:17:20 +09:00
asn1_compiler.c
bin2c.c
bloat-o-meter
bootgraph.pl
bpf_doc.py
cc-can-link.sh
cc-version.sh
check_extable.sh	scripts: check_extable: fix typo in user error message	2021-09-08 11:50:28 -07:00
check-sysctl-docs
checkdeclares.pl	scripts: make some scripts executable	2021-08-10 09:13:25 +09:00
checkincludes.pl
checkkconfigsymbols.py	checkkconfigsymbols.py: Remove skipping of help lines in parse_kconfig_file	2021-09-19 10:13:03 +09:00
checkpatch.pl	checkpatch: improve GIT_COMMIT_ID test	2021-09-08 11:50:27 -07:00
checkstack.pl
checksyscalls.sh	don't make the syscall checking produce errors from warnings	2021-09-06 09:15:09 -07:00
checkversion.pl	scripts: checkversion: modernize linux/version.h search strings	2021-08-05 20:55:39 +09:00
cleanfile
cleanpatch
coccicheck
config
const_structs.checkpatch
decode_stacktrace.sh
decodecode
depmod.sh
dev-needs.sh
diffconfig
documentation-file-ref-check
export_report.pl
extract_xc3028.pl
extract-cert.c
extract-ikconfig
extract-module-sig.pl
extract-sys-certs.pl
extract-vmlinux
faddr2line
file-size.sh
find-unused-docs.sh
gcc-goto.sh
gcc-ld
gcc-x86_32-has-stack-protector.sh
gcc-x86_64-has-stack-protector.sh
gen_autoksyms.sh	kbuild: Fix TRIM_UNUSED_KSYMS with LTO_CLANG	2021-09-03 08:12:39 +09:00
gen_ksymdeps.sh	kbuild: redo fake deps at include/ksym/*.h	2021-09-03 08:17:21 +09:00
generate_initcall_order.pl
get_abi.pl
get_dvb_firmware
get_feat.pl
get_maintainer.pl
gfp-translate
headerdep.pl
headers_check.pl
headers_install.sh
insert-sys-cert.c
jobserver-exec
kallsyms.c
Kbuild.include	kbuild: warn if FORCE is missing for if_changed(_dep,_rule) and filechk	2021-09-03 08:17:19 +09:00
Kconfig.include
kernel-doc	stddef: Introduce struct_group() helper macro	2021-09-25 08:20:47 -07:00
ld-version.sh
leaking_addresses.pl
Lindent
link-vmlinux.sh	kbuild: merge vmlinux_link() between ARCH=um and other architectures	2021-09-03 08:17:21 +09:00
Makefile
Makefile.asm-generic
Makefile.build	kbuild: remove stale *.symversions	2021-09-03 08:17:20 +09:00
Makefile.clang	kbuild: Add -Werror=ignored-optimization-argument to CLANG_FLAGS	2021-09-19 10:55:18 +09:00
Makefile.clean
Makefile.compiler
Makefile.dtbinst
Makefile.extrawarn
Makefile.gcc-plugins
Makefile.headersinst
Makefile.host
Makefile.kasan
Makefile.kcov
Makefile.kcsan
Makefile.lib	Kbuild updates for v5.15	2021-09-03 15:33:47 -07:00
Makefile.modfinal	kbuild: Fix TRIM_UNUSED_KSYMS with LTO_CLANG	2021-09-03 08:12:39 +09:00
Makefile.modinst
Makefile.modpost	kbuild: Fix comment typo in scripts/Makefile.modpost	2021-09-19 10:14:19 +09:00
Makefile.package
Makefile.ubsan
Makefile.userprogs
makelst
markup_oops.pl
min-tool-version.sh	Documentation: raise minimum supported version of GCC to 5.1	2021-09-13 10:18:28 -07:00
mkcompile_h
mksysmap
mkuboot.sh
module.lds.S	module: combine constructors in module linker script	2021-07-19 14:51:40 +02:00
modules-check.sh
nsdeps
objdiff
parse-maintainers.pl
patch-kernel
profile2linkerlist.pl
prune-kernel
recordmcount.c
recordmcount.h
recordmcount.pl	scripts/recordmcount.pl: Remove check_objcopy() and $can_use_local	2021-08-04 17:49:26 -04:00
remove-stale-files
setlocalversion	scripts/setlocalversion: fix a bug when LOCALVERSION is empty	2021-07-18 23:48:14 +09:00
show_delta
sign-file.c
sorttable.c	riscv: Enable BUILDTIME_TABLE_SORT	2021-09-10 23:59:44 -07:00
sorttable.h
spdxcheck-test.sh	scripts/spdxcheck-test.sh: Drop python2	2021-07-21 15:59:32 +02:00
spdxcheck.py
spelling.txt
sphinx-pre-install
split-man.pl
stackdelta
stackusage
subarch.include	parisc: Fix compile failure when building 64-bit kernel natively	2021-09-01 21:52:02 +02:00
syscallhdr.sh
syscallnr.sh	scripts: make some scripts executable	2021-08-10 09:13:25 +09:00
syscalltbl.sh
tags.sh
test_fortify.sh	fortify: Add compile-time FORTIFY_SOURCE tests	2021-10-18 12:28:52 -07:00
tools-support-relr.sh
unifdef.c
ver_linux
xen-hypercalls.sh	scripts: make some scripts executable	2021-08-10 09:13:25 +09:00
xz_wrap.sh