libvulkan: Enable integer sanitization
This causes the compiler to add runtime checks for undefined (e.g.
shift by larger than bitwidth) or suspicious (e.g. unsigned integer
overflow) operations. The process will abort if they occur.
In particular, we do many allocations of the form pfnAllocation(n *
sizeof(T)); if 'n' is large these will overflow and we'll allocate
less memory than expected, possibly leading to exploitable buffer
overruns.
Requested during security audit in bug 27118888.
Change-Id: Id81c94595579df034b948a40270f164e38635070
diff --git a/vulkan/libvulkan/Android.mk b/vulkan/libvulkan/Android.mk
index 779fedf..85b8ab2 100644
--- a/vulkan/libvulkan/Android.mk
+++ b/vulkan/libvulkan/Android.mk
@@ -16,6 +16,8 @@
include $(CLEAR_VARS)
LOCAL_CLANG := true
+LOCAL_SANITIZE := integer
+
LOCAL_CFLAGS := -DLOG_TAG=\"vulkan\" \
-std=c99 -fvisibility=hidden -fstrict-aliasing \
-Weverything -Werror \