[libfuzzer] Add more UBSan flags to is_ubsan_security configuration.

build/config/sanitizers/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build_overrides/build.gni")
 import("//build/config/chrome_build.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/clang/clang.gni")
 import("//build/config/sanitizers/sanitizers.gni")
 import("//build/toolchain/toolchain.gni")
@@ skipping 462 matching lines @@
   if (is_ubsan_no_recover) {
     cflags = [ "-fno-sanitize-recover=undefined" ]
   }
 }
 
 config("ubsan_security_flags") {
   if (is_ubsan_security) {
     ubsan_security_blacklist_path =
         rebase_path("//tools/ubsan/security_blacklist.txt", root_build_dir)
     cflags = [
-      "-fsanitize=signed-integer-overflow,shift,vptr",
+      "-fsanitize=signed-integer-overflow,shift,vptr,function,object-size,vla-bound",
       "-fsanitize-blacklist=$ubsan_security_blacklist_path",
     ]
   }
 }
 
 config("ubsan_null_flags") {
   if (is_ubsan_null) {
     cflags = [ "-fsanitize=null" ]
   }
 }
@@ skipping 41 matching lines @@
 # This allows to selectively disable ubsan_vptr, when needed. In particular,
 # if some third_party code is required to be compiled without rtti, which
 # is a requirement for ubsan_vptr.
 config("default_sanitizer_flags_but_ubsan_vptr") {
   configs = all_sanitizer_configs - [ ":ubsan_vptr_flags" ]
 }
 
 config("default_sanitizer_flags_but_coverage") {
   configs = all_sanitizer_configs - [ ":coverage_flags" ]
 }