1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
# Description:
# This VDSO is a shared library that provides the same interfaces as the
# normal system VDSO (time, gettimeofday, clock_gettimeofday) but which uses
# timekeeping parameters managed by the sandbox kernel.
load("//tools:defs.bzl", "cc_flags_supplier", "cc_toolchain", "select_arch", "vdso_linker_option")
package(licenses = ["notice"])
genrule(
name = "vdso",
srcs = [
"barrier.h",
"compiler.h",
"cycle_clock.h",
"seqlock.h",
"syscalls.h",
"vdso.cc",
"vdso_amd64.lds",
"vdso_arm64.lds",
"vdso_time.h",
"vdso_time.cc",
],
outs = [
"vdso.so",
],
cmd = "$(CC) $(CC_FLAGS) " +
"-I. " +
"-O2 " +
"-std=c++11 " +
"-fPIC " +
"-fno-sanitize=all " +
# Some toolchains enable stack protector by default. Disable it, the
# VDSO has no hooks to handle failures.
"-fno-stack-protector " +
vdso_linker_option +
select_arch(
amd64 = "-m64 ",
arm64 = "",
) +
"-shared " +
"-nostdlib " +
"-Wl,-soname=linux-vdso.so.1 " +
"-Wl,--hash-style=sysv " +
"-Wl,--no-undefined " +
"-Wl,-Bsymbolic " +
"-Wl,-z,max-page-size=4096 " +
"-Wl,-z,common-page-size=4096 " +
select_arch(
amd64 = "-Wl,-T$(location vdso_amd64.lds) ",
arm64 = "-Wl,-T$(location vdso_arm64.lds) ",
no_match_error = "unsupported architecture",
) +
"-o $(location vdso.so) " +
"$(location vdso.cc) " +
"$(location vdso_time.cc) " +
"&& $(location :check_vdso) " +
"--check-data " +
"--vdso $(location vdso.so) ",
exec_tools = [
":check_vdso",
],
features = ["-pie"],
toolchains = [
cc_toolchain,
":no_pie_cc_flags",
],
visibility = ["//:sandbox"],
)
cc_flags_supplier(
name = "no_pie_cc_flags",
features = ["-pie"],
)
py_binary(
name = "check_vdso",
srcs = ["check_vdso.py"],
python_version = "PY3",
visibility = ["//:sandbox"],
)
|
