diff --git a/cfi_blocklist.txt b/cfi_blocklist.txt
new file mode 100644
index 0000000000000000000000000000000000000000..89d302fdc73f6ae208a1956ed722e5016e548e3e
--- /dev/null
+++ b/cfi_blocklist.txt
@@ -0,0 +1,16 @@
+# Copyright (C) 2025 Huawei Device Co., Ltd.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+[cfi]
+src:*third_party/googletest/googlemock/include/gmock/*
+src:*third_party/googletest/googletest/include/gtest/*
\ No newline at end of file
diff --git a/datamgr_service.gni b/datamgr_service.gni
index da3e7a494d5e4474f2f5e30387cab6d3a8465cfd..7b327ccea5c69ef499da3dbd5991d35f004b2ed9 100644
--- a/datamgr_service.gni
+++ b/datamgr_service.gni
@@ -38,6 +38,8 @@ udmf_path = "//foundation/distributeddatamgr/udmf"
 
 dataobject_path = "//foundation/distributeddatamgr/data_object"
 
+datamgr_service_path = "//foundation/distributeddatamgr/datamgr_service"
+
 declare_args() {
   datamgr_service_power = true
   if (!defined(global_parts_info.power_manager_native_powermgr_client) ||
diff --git a/services/distributeddataservice/service/test/BUILD.gn b/services/distributeddataservice/service/test/BUILD.gn
index 4d16dc1f16da9821cb12a46d166c737f55928c58..b4f1fb9efc5fe449a6e3d5cfa33bd9eabc2c85c2 100755
--- a/services/distributeddataservice/service/test/BUILD.gn
+++ b/services/distributeddataservice/service/test/BUILD.gn
@@ -1085,6 +1085,12 @@ ohos_unittest("DataShareServiceImplTest") {
 
 ohos_unittest("KvdbServiceImplTest") {
   module_out_path = module_output_path
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+    blocklist = "${datamgr_service_path}/cfi_blocklist.txt"
+  }
   sources = [
     "${data_service_path}/app/src/kvstore_meta_manager.cpp",
     "kvdb_service_impl_test.cpp",