From fc4d81d9cf92df46e805e726ac42308ddda472f9 Mon Sep 17 00:00:00 2001
From: sunxuhui <sunxuhui7@huawei.com>
Date: Thu, 5 Dec 2024 16:02:24 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9E=84=E5=BB=BA=E5=AE=8C=E5=96=84=E5=AE=89?=
 =?UTF-8?q?=E5=85=A8=E9=9A=90=E7=A7=81=E5=90=88=E8=A7=84=20=EF=BC=88cherry?=
 =?UTF-8?q?=20picked=20commit=20from=20<gitee.com//openharmony/bundlemanag?=
 =?UTF-8?q?er=5Fdistributed=5Fbundle=5Fframework/commit/3bdc16ee7f06473aa5?=
 =?UTF-8?q?758aae49a6166081697256>=20Signed-off-by:=20sunxuhui=20<sunxuhui?=
 =?UTF-8?q?7@huawei.com>?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 interfaces/inner_api/BUILD.gn                   |  2 ++
 interfaces/kits/js/distributebundlemgr/BUILD.gn | 12 ++++++++++++
 interfaces/kits/js/distributedBundle/BUILD.gn   | 12 ++++++++++++
 services/dbms/BUILD.gn                          |  2 ++
 4 files changed, 28 insertions(+)

diff --git a/interfaces/inner_api/BUILD.gn b/interfaces/inner_api/BUILD.gn
index d9384bc..4fda217 100644
--- a/interfaces/inner_api/BUILD.gn
+++ b/interfaces/inner_api/BUILD.gn
@@ -30,6 +30,8 @@ ohos_shared_library("dbms_fwk") {
     ubsan = true
   }
 
+  cflags = [ "-fstack-protector-strong" ]
+
   sources = [ "src/distributed_bms_proxy.cpp" ]
 
   defines = [
diff --git a/interfaces/kits/js/distributebundlemgr/BUILD.gn b/interfaces/kits/js/distributebundlemgr/BUILD.gn
index 6604733..4223a86 100644
--- a/interfaces/kits/js/distributebundlemgr/BUILD.gn
+++ b/interfaces/kits/js/distributebundlemgr/BUILD.gn
@@ -15,6 +15,18 @@ import("//build/ohos.gni")
 import("../../../../dbms.gni")
 
 ohos_shared_library("distributedbundle") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    cfi = true
+    debug = false
+    integer_overflow = true
+    ubsan = true
+  }
+
+  cflags = [ "-fstack-protector-strong" ]
+
   include_dirs = []
   defines = [
     "APP_LOG_TAG = \"DistributedBundleMgrService\"",
diff --git a/interfaces/kits/js/distributedBundle/BUILD.gn b/interfaces/kits/js/distributedBundle/BUILD.gn
index 1c1c603..dc3b44a 100644
--- a/interfaces/kits/js/distributedBundle/BUILD.gn
+++ b/interfaces/kits/js/distributedBundle/BUILD.gn
@@ -15,6 +15,18 @@ import("//build/ohos.gni")
 import("../../../../dbms.gni")
 
 ohos_shared_library("distributedbundlemanager") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    cfi = true
+    debug = false
+    integer_overflow = true
+    ubsan = true
+  }
+
+  cflags = [ "-fstack-protector-strong" ]
+
   defines = [
     "APP_LOG_TAG = \"DistributedBundleMgrService\"",
     "LOG_DOMAIN = 0xD0011E0",
diff --git a/services/dbms/BUILD.gn b/services/dbms/BUILD.gn
index d4f6a0f..1b70d3b 100644
--- a/services/dbms/BUILD.gn
+++ b/services/dbms/BUILD.gn
@@ -36,6 +36,8 @@ ohos_shared_library("libdbms") {
     ubsan = true
   }
 
+  cflags = [ "-fstack-protector-strong" ]
+
   sources = [
     "src/account_manager_helper.cpp",
     "src/dbms_device_manager.cpp",
-- 
Gitee