Skip to content

Enable UBSAN_BOUNDS and UBSAN_SHIFT

Kees Cook requested to merge kees/linux:ubsan into master

Ubuntu and Android have had UBSAN_BOUNDS enabled for a couple years now, and Fedora has recently followed suit. UBSAN_SHIFT appears to have had all the corner cases shaken out via syzkaller.

This produces warnings only so anyone wanting to enforce the bounds checking needs to set the warn_limit (or panic_on_warn) sysctl.

Merge request reports