diff --git a/libdmabufheap/BUILD.gn b/libdmabufheap/BUILD.gn index 9dd2fcbe9958bd4de4767de00b976a14ddf19e64..5a3c8159ed01fffb80d2f932c6506e05a7dc37c3 100644 --- a/libdmabufheap/BUILD.gn +++ b/libdmabufheap/BUILD.gn @@ -28,4 +28,11 @@ ohos_shared_library("libdmabufheap") { subsystem_name = "commonlibrary" innerapi_tags = [ "chipsetsdk" ] part_name = "memory_utils" + + sanitize = { + cfi = true + cfi_cross_dso = true + debug = false + } + branch_protector_ret = "pac_ret" } diff --git a/libmeminfo/BUILD.gn b/libmeminfo/BUILD.gn index 59b004283a6d3cd36cb301eb9dfb6a07da507362..783c78c61c2ce56d0bf573ef335ce1addf27a63d 100644 --- a/libmeminfo/BUILD.gn +++ b/libmeminfo/BUILD.gn @@ -28,4 +28,11 @@ ohos_shared_library("libmeminfo") { public_configs = [ ":libmeminfo_config" ] subsystem_name = "commonlibrary" part_name = "memory_utils" + + sanitize = { + cfi = true + cfi_cross_dso = true + debug = false + } + branch_protector_ret = "pac_ret" } diff --git a/libpurgeablemem/BUILD.gn b/libpurgeablemem/BUILD.gn index 4480bf1296ac1e952bfd2dbf995cf4d9b704092c..cf454b5b6b1f1a070c6fb16edc4499af901347f2 100644 --- a/libpurgeablemem/BUILD.gn +++ b/libpurgeablemem/BUILD.gn @@ -48,6 +48,13 @@ ohos_shared_library("libpurgeablemem") { public_configs = [ ":libpurgeable_config" ] subsystem_name = "commonlibrary" part_name = "memory_utils" + + sanitize = { + cfi = true + cfi_cross_dso = true + debug = false + } + branch_protector_ret = "pac_ret" } ohos_shared_library("purgeable_memory_ndk") { diff --git a/libpurgeablemem/interfaces/kits/c/BUILD.gn b/libpurgeablemem/interfaces/kits/c/BUILD.gn index 6ffd6731c1ec8012832cebebbb184c44e61d3f77..a9b54c11c6d5bc6440462a964d4ea74a26e76530 100644 --- a/libpurgeablemem/interfaces/kits/c/BUILD.gn +++ b/libpurgeablemem/interfaces/kits/c/BUILD.gn @@ -24,4 +24,11 @@ ohos_ndk_library("libpurgeable_memory_ndk") { ndk_description_file = "./libpurgeable_memory.ndk.json" system_capability = "SystemCapability.CommonLibrary.Memory.PurgeableMemory" system_capability = "purgeable_memory/purgeable_memory.h" + + sanitize = { + cfi = true + cfi_cross_dso = true + debug = false + } + branch_protector_ret = "pac_ret" }