!77 安全配置规范整改

Merge pull request !77 from liuxiaowei42/master

dfx_utils/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_dfx_utils") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "include",
     "${common_path}/include",

inputdevicehandler/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_handler") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

interfaces/inner_kits/BUILD.gn

@@ -32,6 +32,12 @@ config("input_sdk_public_config") {
   ]
 }
 ohos_shared_library("libdinput_sdk") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   public_configs = [ ":input_sdk_public_config" ]
 
   sources = [

services/sink/inputcollector/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_collector") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/sink/sinkmanager/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_sink") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/sink/transport/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_sink_trans") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/source/inputinject/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_inject") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/source/sourcemanager/BUILD.gn

@@ -15,6 +15,12 @@ import("//build/ohos.gni")
 import("../../../distributedinput.gni")
 
 ohos_shared_library("libdinput_source") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/source/transport/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_source_trans") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

services/state/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_state") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "include",
     "${common_path}/include",

services/transportbase/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_trans_base") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "include",

sinkhandler/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_sink_handler") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "include",
     "${innerkits_path}/include",

sourcehandler/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_source_handler") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "include",
     "${innerkits_path}/include",

utils/BUILD.gn

@@ -16,6 +16,12 @@ import(
     "//foundation/distributedhardware/distributed_input/distributedinput.gni")
 
 ohos_shared_library("libdinput_utils") {
+  sanitize = {
+    boundary_sanitize = true
+    integer_overflow = true
+    ubsan = true
+  }
+  stack_protector_ret = true
   include_dirs = [
     "${av_transport_path}/common/include",
     "${fwk_common_path}/utils/include",