安全配置规范

Signed-off-by: guoyi <guoyi39@huawei.com>

common/BUILD.gn

@@ -25,6 +25,17 @@ config("distributed_device_profile_common_config") {
 }
 
 ohos_shared_library("distributed_device_profile_common") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   install_enable = true
 
   sources = [

interfaces/innerkits/core/BUILD.gn

@@ -1,4 +1,4 @@
-# Copyright (c) 2021-2023 Huawei Device Co., Ltd.
+# Copyright (c) 2021-2024 Huawei Device Co., Ltd.
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
@@ -28,6 +28,17 @@ config("distributed_device_profile_sdk_config") {
 }
 
 ohos_shared_library("distributed_device_profile_sdk") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   install_enable = true
 
   sources = [

radar/BUILD.gn

@@ -15,6 +15,17 @@ import("//build/ohos.gni")
 import("//build/ohos_var.gni")
 import("//foundation/deviceprofile/device_info_manager/deviceprofile.gni")
 ohos_shared_library("deviceprofileradar") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   include_dirs = [
     "include",
     "${old_device_profile_path}/common/include",

services/core/BUILD.gn

@@ -39,6 +39,17 @@ config("device_info_manager_config") {
 }
 
 ohos_shared_library("distributed_device_profile_svr") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   install_enable = true
   sources = [
     "src/contentsensormanager/collaboration_info_collector.cpp",