Skip to content

Create new Tier 2 targets with sanitizers enabled by default #951

@jakos-sec

Description

@jakos-sec

Proposal

In the efforts of the Rust goal Rust Stabilization of MemorySanitizer and ThreadSanitizer Support, we are looking for a solution to distribute prebuilt sanitizer instrumented standard libraries. This was requested by previous reviews, in order to stabilize sanitizers that require all code to be instrumented since otherwise they generate false positives (like the MemorySanitizer and ThreadSanitizer). Currently the only way to realistically use those is with -Z build-std, but if we stabilize the sanitizers, it is odd to still be dependent on another unstable flag. This will also benefit other sanitizers (such as ASAN) to reduce false negatives.

The MCP (#943) for it resulted in the suggestion to, instead of the initially proposed rustc flag to choose a different rustlib path, make new targets which have (e.g.) ASAN enabled by default and we can use rustup to distribute standard libraries for those targets which are automatically instrumented.

I've started with rust-lang/rust#149644, but in order to distribute the prebuilt standard libraries it needs to be a Tier 2 target (hence this MCP).

I started with the target for ASAN, but ideally we would like to do the same for (MSAN, TSAN, LeakSanitizer). Particularly MSAN and TSAN need instrumented standard libraries since without whole binary instrumentation they cause false positives.

As for the naming there were currently multiple suggestions for an ASAN enabled x86_64-unknown-linux-gnu target:

For completeness:

  • x86_64-unknown_asan-linux-gnu: Appending to unknown instead of replacing it.
  • x86_64_asan-unknown-linux-gnu: compiling sanitizer rt complains since the LLVM sees: Compiler-RT supported architectures: x86_64_asan (which is not a valid ARCH).
    x86_64-unknown-linux_asan-gnu: worked but I'm not sure if that's ideal either (will probably break some things parsing -linux-gnu.

Mentors or Reviewers

Mentor/Reviewer: rcvalle

Process

The main points of the Major Change Process are as follows:

  • File an issue describing the proposal.
  • A compiler team member who is knowledgeable in the area can second by writing @rustbot second or kickoff a team FCP with @rfcbot fcp $RESOLUTION.
  • Once an MCP is seconded, the Final Comment Period begins.
    • Final Comment Period lasts for 10 days after all outstanding concerns are solved.
    • Outstanding concerns will block the Final Comment Period from finishing. Once all concerns are resolved, the 10 day countdown is restarted.
    • If no concerns are raised after 10 days since the resolution of the last outstanding concern, the MCP is considered approved.

You can read more about Major Change Proposals on forge.

Metadata

Metadata

Assignees

No one assigned

    Labels

    T-compilerAdd this label so rfcbot knows to poll the compiler teammajor-changeA proposal to make a major change to rustcto-announceAnnounce this issue on triage meeting

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions