disable GWP-Asan since it regresses security

This commit is contained in:
Daniel Micay 2023-11-01 18:12:48 -04:00
parent 1c46e5ae8c
commit b1664d1905

View File

@ -720,6 +720,7 @@
<ul>
<li>use sdk_phone_x86_64 (emulator) target as the default one for convenience</li>
<li>disable GWP-ASan since it's a bug finding features rather than a hardening feature and doesn't preserve all the hardened_malloc security properties for the random allocations in random system processes where it gets activated especially now that memory tagging is supported</li>
<li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.199</li>
<li>GmsCompatConfig: update to <a href="https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-81">version 81</a></li>
</ul>