Lines Matching refs:cfi

22 To enable Clang's available CFI schemes, use the flag ``-fsanitize=cfi``.
23 You can also enable a subset of available :ref:`schemes <cfi-schemes>`.
38 The ``-fsanitize=cfi-{vcall,nvcall,derived-cast,unrelated-cast}`` flags
45 <cfi-cross-dso>` exists that does not require classes to have hidden LTO
57   -  ``-fsanitize=cfi-cast-strict``: Enables :ref:`strict cast checks
58      <cfi-strictness>`.
59   -  ``-fsanitize=cfi-derived-cast``: Base-to-derived cast to the wrong
61   -  ``-fsanitize=cfi-unrelated-cast``: Cast from ``void*`` or another
63   -  ``-fsanitize=cfi-nvcall``: Non-virtual call via an object whose vptr is of
65   -  ``-fsanitize=cfi-vcall``: Virtual call via an object whose vptr is of the
67   -  ``-fsanitize=cfi-icall``: Indirect call of a function with wrong dynamic
70 You can use ``-fsanitize=cfi`` to enable all the schemes and use
73 ``-fsanitize=cfi -fno-sanitize=cfi-nvcall,cfi-icall``
105 This CFI scheme can be enabled on its own using ``-fsanitize=cfi-vcall``.
109 of :ref:`blacklisted <cfi-blacklist>` types, must be compiled with
110 ``-fsanitize=cfi-vcall`` enabled and be statically linked into the program.
137 ``-fsanitize=cfi-derived-cast``), and bad casts from a pointer of
139 ``-fsanitize=cfi-unrelated-cast``).
151 functions may be :ref:`blacklisted <cfi-blacklist>`.
155 of :ref:`blacklisted <cfi-blacklist>` types, must be compiled with
156 ``-fsanitize=cfi-derived-cast`` or ``-fsanitize=cfi-unrelated-cast`` enabled
167 ``-fsanitize=cfi-nvcall``.
171 of :ref:`blacklisted <cfi-blacklist>` types, must be compiled with
172 ``-fsanitize=cfi-nvcall`` enabled and be statically linked into the program.
189 default. It can be disabled with ``-fsanitize=cfi-cast-strict``.
197 using ``-fsanitize=cfi-icall``.
200 than calls in :ref:`blacklisted <cfi-blacklist>` functions, must call a
201 function which was either compiled with ``-fsanitize=cfi-icall`` enabled,
203 ``-fsanitize=cfi-icall``.
205 If a function in a translation unit compiled with ``-fsanitize=cfi-icall``
206 takes the address of a function not compiled with ``-fsanitize=cfi-icall``,
208 unit not compiled with ``-fsanitize=cfi-icall``. This is technically a
211 Each translation unit compiled with ``-fsanitize=cfi-icall`` must be
214 ``-fsanitize=cfi-icall``.
218 ``-fsanitize=cfi-icall`` and ``-fsanitize=function``
224 to find bugs in local development builds, whereas ``-fsanitize=cfi-icall``
231 programs, whereas ``-fsanitize=cfi-icall`` can protect both C and C++ programs.
263 Use **-f[no-]sanitize-cfi-cross-dso** to enable the cross-DSO control