Changes in asan.c

b8a0c52c847baf133e08f19f69759eb8a5de1a2c - libutils: asan: skip global unpoison for bget-backed globals

Thu, 08 Jan 2026 11:20:22 +0000

libutils: asan: skip global unpoison for bget-backed globalsTrack ASan user-region type at map time and mark bget pool backing rangesas ASAN_REG_MEM_POOL.Global registration currently unpoisons globals via asan_tag_access().For globals used as bget pool backing storage, this overwrites the initialpool shadow state (ASAN_HEAP_RED_ZONE, heap-free) and breaks expectedallocator poisoning semantics.Skip global unpoison for globals that contain a memory-pool backing range,while keeping normal redzone handling for those globals. Update ASanmapping call sites to pass region type (STACK, ELF, MEM_POOL, NO_TYPE).Signed-off-by: Aleksandr Iashchenko Reviewed-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c

081fba0cd741cce07a7ab56e592273cc9d26efa5 - libutils: asan: improve report output

Fri, 19 Dec 2025 20:18:08 +0000

libutils: asan: improve report outputAdd optional shadow dump in TRACE_DEBUG builds for better ASan diagnostics.Also expand the shadow bytes printed around the faulting address.Signed-off-by: Aleksandr Iashchenko Reviewed-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c

9f2dc7a17efdd58b8afa6c45edcc5bb99c766bfa - asan: support trusted applications

Fri, 19 Dec 2025 20:08:27 +0000

asan: support trusted applicationsAdd CFG_TA_SANITIZE_KADDRESS and enable -fsanitize=kernel-address for TAs.Extend ASan to map shadow regions in user space. Shadow memory for trustedapplications is now mapped during ldelf loading. CFG_TA_SANITIZE_KADDRESSacts as a global flag and propagates to all internal and external TAs.Signed-off-by: Aleksandr Iashchenko Reviewed-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c

4cafd8a3f88594ce06758c2a85b59c2d32a6ac7e - asan: add ldelf support and user shadow mapping infrastructure

Fri, 19 Dec 2025 16:45:04 +0000

asan: add ldelf support and user shadow mapping infrastructureThis commit enables ASan support in ldelf and introduces infrastructurefor mapping ASan shadow regions in user space. With these changes,ASan built with CFG_CORE_SANITIZE_KADDRESS is no longer limited tothe core and can also operate in ldelf.Signed-off-by: Aleksandr Iashchenko Reviewed-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c

60aa5df76a7b755920e4cd602359bd8a7488e5f3 - libutils: asan: support multiple shadow regions

Fri, 12 Dec 2025 14:14:54 +0000

libutils: asan: support multiple shadow regionsReplace the single shadow range with a list of shadowed virtual regions.Access validation is performed per-region: an access is considered insideshadow memory only if it is fully contained within a single registeredregion. The access is considered out of shadow memory if it does notintersect any registered shadow region.Signed-off-by: Aleksandr Iashchenko Reviewed-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c

d6d1731bef3d306080076b5a9be15682e353241a - libutils: move ASan runtime and tests from core to libutils

Sat, 15 Nov 2025 09:07:42 +0000

libutils: move ASan runtime and tests from core to libutilsThis patch relocates the ASan runtime and its self-tests from the coreto libutils/ext. While ASan is still only enabled for the TEE core, thisrefactoring removes core-specific placement and makes the codeavailable to other components.The main benefit is that ASan support and the test helpers can now bepotentially reused by ldelf and TAs in the future, instead of beingtied to the core build. The existing ASan core behaviour is unchanged.Signed-off-by: Aleksandr Iashchenko Acked-by: Jens Wiklander List of files: /optee_os/lib/libutils/ext/asan.c