Add lint check for IRT sandbox base address hiding.

build/build_nexe.py

 #!/usr/bin/python
 # Copyright (c) 2012 The Native Client Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 """NEXE building script
 
 This module will take a set of source files, include paths, library paths, and
 additional arguments, and use them to build.
 """
@@ skipping 266 matching lines @@
     return self.GetBinName('ar')
 
   def GetStrip(self):
     """Helper which returns strip path."""
     return self.GetBinName('strip')
 
   def GetObjCopy(self):
     """Helper which returns objcopy path."""
     return self.GetBinName('objcopy')
 
+  def GetLe32ObjDump(self):
+    """Helper which returns objdump path."""
+    return os.path.join(self.toolbin, 'le32-nacl-objdump')
+
   def GetReadElf(self):
     """Helper which returns readelf path."""
     return self.GetBinName('readelf')
 
   def GetPnaclFinalize(self):
     """Helper which returns pnacl-finalize path."""
     assert self.is_pnacl_toolchain
     return self.GetBinName('finalize')
 
   def BuildAssembleOptions(self, options):
@@ skipping 301 matching lines @@
     if self.irt_linker:
       if self.tls_edit is None:
         raise Error('Linking the IRT requires tls_edit')
       irt_link_cmd = [sys.executable, self.irt_linker,
                       '--output=' + out,
                       '--tls-edit=' + self.tls_edit,
                       '--link-cmd=' + bin_name,
                       '--readelf-cmd=' + self.GetReadElf()]
       if self.commands_are_scripts:
         irt_link_cmd += ['--commands-are-scripts']
+      if self.arch == 'x86-64':
+        irt_link_cmd += ['--sandbox-base-hiding-check',
+                         '--objdump-cmd=' + self.GetLe32ObjDump()]
       irt_link_cmd += srcs_flags
       err = self.Run(irt_link_cmd, normalize_slashes=False)
       if err:
         raise Error('FAILED with %d: %s' % (err, ' '.join(irt_link_cmd)))
       return out
 
     MakeDir(os.path.dirname(out))
     cmd_line = [bin_name, '-o', out, '-Wl,--as-needed']
     cmd_line += srcs_flags
 
@@ skipping 402 matching lines @@
     if build is not None:
       build.EmitDeferredLog()
     return 1
   except:
     if build is not None:
       build.EmitDeferredLog()
     raise
 
 if __name__ == '__main__':
   sys.exit(Main(sys.argv))