[CFI] Implemented failure reporting mechanism for CFI checks · Pull Request !582 · OpenHarmony/third_party_llvm-project

### Issue
https://gitee.com/openharmony/third_party_llvm-project/issues/IAJ36I

### Reason (Purpose, Solved Problem)
The primary reason for this change is to provide detailed location information when a CFI check fails in release mode. In production environments, where debug information is often stripped or minimized, it can be challenging to identify the source of a CFI violation. By implementing the __cfi_fail_report function, we capture critical data such as the x1 register value and symbol information, even in release builds. This enhancement will greatly assist in diagnosing and resolving CFI-related crashes without the need for a full debug build, thereby improving the reliability and maintainability of the system in production.

### Description
This commit introduces a new failure reporting mechanism for Control Flow Integrity (CFI) checks specifically on aarch64 architecture.
- The `__cfi_fail_report` function was implemented to handle cases where a CFI check fails. This function captures the `x1` register value, attempts to retrieve the corresponding symbol information using `dladdr`, and constructs a detailed error message, including the library name, function address, and function name. If symbol information is unavailable, the function reports the raw function address. After logging the message, the function calls `abort` to terminate the program.

- A new source file `cfi_fail_report.cpp` was added to contain the implementation of this failure reporting mechanism.

- The CMake build configuration was updated to include the new file, creating a dedicated static library `clang_rt.cfi_fail_report`. This ensures that the new functionality is integrated into the existing CFI runtime library and is compiled for all supported architectures.

**libclang_rt.cfi_fail_report.a size： 5.1K**

Development Guidelines: https://gitee.com/openharmony/third_party_llvm-project/blob/master/OpenHarmonyDevelopmentGuidelines.md

### Test (Local test)
1. In the cfi_check_failed scenario, __cfi_fail_report will print the function pointer address or vtable address that caused the CFI check failure.
![输入图片说明](https://foruda.gitee.com/images/1723288521776750510/8cc4e1c5_10784127.png "屏幕截图")

```
/usr/bin/env "../../../build/toolchain/gcc_link_wrapper.py" --output="musl/libc-test/icall_ubsan_test" --strip="../../../prebuilts/clang/ohos/linux-x86_64/llvm/bin/llvm-strip" --unstripped-file="./exe.unstripped/musl/libc-test/icall_ubsan_test" --clang-base-dir="/srv/workspace/symbolizer_0000b1af0/code/prebuilts/clang/ohos"  --mini-debug -- ../../../prebuilts/clang/ohos/linux-x86_64/llvm/bin/clang++ -Wl,--pack-dyn-relocs=android+relr -Wl,--fatal-warnings -Wl,--build-id=md5 -fPIC -Wl,-z,noexecstack -Wl,-z,now -Wl,-z,relro -Wl,-z,defs -Wl,--as-needed -fuse-ld=lld -Wl,-z,max-page-size=4096 -Wl,--icf=all -Wl,--color-diagnostics -flto=thin -Wl,--thinlto-jobs=16 -Wl,--thinlto-cache-dir=thinlto-cache -Wl,--lto-O0 -Wl,--no-undefined -Wl,--exclude-libs=libunwind_llvm.a -Wl,--exclude-libs=libc++_static.a -Wl,--exclude-libs=libvpx_assembly_arm.a --target=aarch64-linux-ohos -Wl,--hash-style=gnu -march=armv8-a -Werror -Wl,--warn-shared-textrel -Wl,-O2 -Wl,--gc-sections -Wl,--gdb-index --sysroot=obj/third_party/musl -nostdlib -Lobj/third_party/musl/usr/lib/aarch64-linux-ohos -L../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos -Wl,--warn-shared-textrel -Bdynamic -Wl,-z,nocopyreloc -pie -fsanitize-trap=all -ftrap-function=abort -fcfi-trap-function=__cfi_fail_report -flto -fsanitize=cfi -fsanitize-cfi-cross-dso -Wl,--version-script=/srv/workspace/symbolizer_0000b1af0/code/build/config/sanitizers/cfi.versionscript -o "./exe.unstripped/musl/libc-test/icall_ubsan_test" obj/third_party/musl/usr/lib/aarch64-linux-ohos/Scrt1.o obj/third_party/musl/usr/lib/aarch64-linux-ohos/crti.o -Wl,--start-group  @"musl/libc-test/icall_ubsan_test.rsp"  -lunwind ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.builtins.a -lc++ -lc ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/aarch64-linux-ohos/libc++abi.a ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.gwp_asan.a -ldl -lm ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.cfi_fail_report.a ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.ubsan_minimal.so -Wl,--end-group  obj/third_party/musl/usr/lib/aarch64-linux-ohos/crtn.o
```

![输入图片说明](https://foruda.gitee.com/images/1723288642304736292/92cd2ca5_10784127.png "屏幕截图")

2. Enable both UBSan (Undefined Behavior Sanitizer) and CFI (Control Flow Integrity) checks simultaneously without affecting UBSan detection.

```
ohos_executable("icall_ubsan_test") {
  sanitize = {
    cfi = true
    cfi_cross_dso = true
    debug = false
    ubsan = true
  }
  sources = [ "icall_ubsan_test.cpp" ]
  part_name = "libc-test"
  subsystem_name = "musl"
}
```

```
/usr/bin/env "../../../build/toolchain/gcc_link_wrapper.py" --output="musl/libc-test/icall_ubsan_test" --strip="../../../prebuilts/clang/ohos/linux-x86_64/llvm/bin/llvm-strip" --unstripped-file="./exe.unstripped/musl/libc-test/icall_ubsan_test" --clang-base-dir="/srv/workspace/symbolizer_0000b1af0/code/prebuilts/clang/ohos"  --mini-debug -- ../../../prebuilts/clang/ohos/linux-x86_64/llvm/bin/clang++ -Wl,--pack-dyn-relocs=android+relr -Wl,--fatal-warnings -Wl,--build-id=md5 -fPIC -Wl,-z,noexecstack -Wl,-z,now -Wl,-z,relro -Wl,-z,defs -Wl,--as-needed -fuse-ld=lld -Wl,-z,max-page-size=4096 -Wl,--icf=all -Wl,--color-diagnostics -flto=thin -Wl,--thinlto-jobs=16 -Wl,--thinlto-cache-dir=thinlto-cache -Wl,--lto-O0 -Wl,--no-undefined -Wl,--exclude-libs=libunwind_llvm.a -Wl,--exclude-libs=libc++_static.a -Wl,--exclude-libs=libvpx_assembly_arm.a --target=aarch64-linux-ohos -Wl,--hash-style=gnu -march=armv8-a -Werror -Wl,--warn-shared-textrel -Wl,-O2 -Wl,--gc-sections -Wl,--gdb-index --sysroot=obj/third_party/musl -nostdlib -Lobj/third_party/musl/usr/lib/aarch64-linux-ohos -L../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos -Wl,--warn-shared-textrel -Bdynamic -Wl,-z,nocopyreloc -pie -fsanitize-trap=all -ftrap-function=abort -fcfi-trap-function=__cfi_fail_report -flto -fsanitize=cfi -fsanitize-cfi-cross-dso -Wl,--version-script=/srv/workspace/symbolizer_0000b1af0/code/build/config/sanitizers/cfi.versionscript -o "./exe.unstripped/musl/libc-test/icall_ubsan_test" obj/third_party/musl/usr/lib/aarch64-linux-ohos/Scrt1.o obj/third_party/musl/usr/lib/aarch64-linux-ohos/crti.o -Wl,--start-group  @"musl/libc-test/icall_ubsan_test.rsp"  -lunwind ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.builtins.a -lc++ -lc ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/aarch64-linux-ohos/libc++abi.a ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.gwp_asan.a -ldl -lm ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.cfi_fail_report.a ../../../prebuilts/clang/ohos/linux-x86_64/llvm/lib/clang/15.0.4/lib/aarch64-linux-ohos/libclang_rt.ubsan_minimal.so -Wl,--end-group  obj/third_party/musl/usr/lib/aarch64-linux-ohos/crtn.o
```
![输入图片说明](https://foruda.gitee.com/images/1723287812942718667/454af07a_10784127.png "屏幕截图")

3. Enable CFI (Control Flow Integrity) on the RK3568. Although __cfi_fail_report is present, it directly calls abort() (i.e., the native implementation) for internal calls, so it won't print CFI debug information. This only affects AArch64.
![输入图片说明](https://foruda.gitee.com/images/1723288060286636448/64e43255_10784127.png "屏幕截图")

### Need to cherry-pick to release (eg：monthly_20221018, OpenHarmony-3.2-Beta5 ...) branch？

- [ ] yes，branch list:
- [x] no

why:

###  Compatibility impact assessment, please indicate (Y/N)

类型	指派人员	状态
审查	hhj Pavel Kosov	进行中 (0/1人)
测试	openharmony_ci 已测试通过	已完成 (1/1人)

OpenHarmony/third_party_llvm-project .gitee-modal { width: 500px !important; }

搜索帮助

OpenHarmony/third_party_llvm-project