Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(3007)

Issue 1502133004: Revert of Enable Control Flow Integrity for the official Linux Chrome. (Closed)

Created:
5 years ago by Mike West
Modified:
5 years ago
Reviewers:
Nico, krasin
CC:
chromium-reviews
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Revert of Enable Control Flow Integrity for the official Linux Chrome. (patchset #1 id:1 of https://codereview.chromium.org/1502373003/ ) Reason for revert: Speculative revert to see if this resolves dependency issues on the official builder. """ Huh! It appears that dpkg-shlibdeps (http://man.he.net/man1/dpkg-shlibdeps) takes a look at the undefined symbols in the binary, looks at their version and generates the requirement, like "libdbus-1-3 (>= 1.2.14)". If some code was eliminated due to full-program optimization, the number of undefined symbols could reduce, and the requirement could become weaker, like "libdbus-1-3 (>= 1.1.4)". """ BUG=567637 Original issue's description: > Enable Control Flow Integrity for the official Linux Chrome. > > This CL turns on CFI, a security check: > https://sites.google.com/a/chromium.org/dev/developers/testing/control-flow-integrity > http://clang.llvm.org/docs/ControlFlowIntegrity.html > > This feature enables LTO (Link-Time Optimization) builds, which slow down the linker by 3x-4x. > CFI also comes with a code size overhead of about 7%-9%. The runtime CPU cost is less than 1%, > and should not be an issue. > > BUG=chromium:464797 > Intent to Implement thread: > https://groups.google.com/a/chromium.org/d/msg/chromium-dev/pbJqt6ccMII/7iJC2oklCAAJ > > This is a third attempt to land the CL. Previous attempts: > https://codereview.chromium.org/1501593003/ > https://codereview.chromium.org/1393283005/ > > All issues discovered by the previous attempt are resolved at this point. > > Committed: https://crrev.com/2e8ed4750b26923558b4754de4fd7f4cae3399e8 > Cr-Commit-Position: refs/heads/master@{#363677} TBR=thakis@chromium.org,krasin@google.com NOPRESUBMIT=true NOTREECHECKS=true NOTRY=true BUG=chromium:464797 Committed: https://crrev.com/8496468f39f1af06f5f0557b999636928487b421 Cr-Commit-Position: refs/heads/master@{#363778}

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+4 lines, -14 lines) Patch
M build/common.gypi View 1 chunk +0 lines, -7 lines 0 comments Download
M build/config/sanitizers/sanitizers.gni View 3 chunks +4 lines, -7 lines 0 comments Download

Messages

Total messages: 7 (1 generated)
Mike West
Created Revert of Enable Control Flow Integrity for the official Linux Chrome.
5 years ago (2015-12-08 09:53:06 UTC) #1
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1502133004/1 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1502133004/1
5 years ago (2015-12-08 09:53:35 UTC) #2
commit-bot: I haz the power
Committed patchset #1 (id:1)
5 years ago (2015-12-08 09:54:22 UTC) #3
commit-bot: I haz the power
Patchset 1 (id:??) landed as https://crrev.com/8496468f39f1af06f5f0557b999636928487b421 Cr-Commit-Position: refs/heads/master@{#363778}
5 years ago (2015-12-08 09:55:36 UTC) #5
Nico
Can you post the actual diff of the deps (it's in the compile stdout close ...
5 years ago (2015-12-08 12:06:18 UTC) #6
krasin
5 years ago (2015-12-08 17:37:53 UTC) #7
Message was sent while issue was closed.
lgtm

Powered by Google App Engine
This is Rietveld 408576698