From: Alexander Popov Date: Sun, 11 Aug 2024 15:05:25 +0000 (+0300) Subject: Add missing UBSAN_SIGNED_WRAP mentioned in kernel/configs/hardening.config X-Git-Tag: v0.6.10~21 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=b613b51a598e496c557a77a7274efb2425cf02ac;p=kconfig-hardened-check.git Add missing UBSAN_SIGNED_WRAP mentioned in kernel/configs/hardening.config --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index a6c6bb9..bd21d9e 100755 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -214,6 +214,7 @@ def add_kconfig_checks(l: List[ChecklistObjType], arch: str) -> None: KconfigCheck('self_protection', 'kspp', 'UBSAN_SHIFT', 'is not set'), KconfigCheck('self_protection', 'kspp', 'UBSAN_DIV_ZERO', 'is not set'), KconfigCheck('self_protection', 'kspp', 'UBSAN_UNREACHABLE', 'is not set'), + KconfigCheck('self_protection', 'kspp', 'UBSAN_SIGNED_WRAP', 'is not set'), KconfigCheck('self_protection', 'kspp', 'UBSAN_BOOL', 'is not set'), KconfigCheck('self_protection', 'kspp', 'UBSAN_ENUM', 'is not set'), KconfigCheck('self_protection', 'kspp', 'UBSAN_ALIGNMENT', 'is not set'))] # only array index bounds checking with traps