安全编译整改

Signed-off-by: linziming <linziming2@huawei.com>
Change-Id: Ice1572d151167b53bb601dc2804ac10f4ed68dc8

config.gni

@@ -28,8 +28,11 @@ declare_args() {
   av_codec_enable_special_codec = false
 }
 av_codec_sanitize = {
+  boundary_sanitize = true
   cfi = true
   cfi_cross_dso = true
+  integer_overflow = true
+  ubsan = true
   debug = false
 }
 av_codec_root_dir = "//foundation/multimedia/av_codec"

interfaces/inner_api/native/BUILD.gn

@@ -174,10 +174,13 @@ ohos_shared_library("av_codec_client") {
   ]
 
   sanitize = {
+    boundary_sanitize = true
     cfi = true
     cfi_cross_dso = true
+    integer_overflow = true
+    ubsan = true
     debug = false
-    blocklist = "../../../cfi_blocklist.txt"
+    blocklist = "$av_codec_root_dir/cfi_blocklist.txt"
   }
 
   configs = [

services/engine/codec/audio/BUILD.gn

@@ -40,10 +40,13 @@ ohos_static_library("av_codec_audio_ffmpeg_codec") {
   ]
 
   sanitize = {
+    boundary_sanitize = true
     cfi = true
     cfi_cross_dso = true
+    integer_overflow = true
+    ubsan = true
     debug = false
-    blocklist = "../../../../cfi_blocklist.txt"
+    blocklist = "$av_codec_root_dir/cfi_blocklist.txt"
   }
 
   include_dirs = [

services/media_engine/filters/BUILD.gn

@@ -49,11 +49,7 @@ config("av_codec_media_engine_filters_config") {
 ohos_shared_library("av_codec_media_engine_filters") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":av_codec_media_engine_filters_config",

services/media_engine/modules/BUILD.gn

@@ -53,11 +53,7 @@ config("av_codec_media_engine_modules_config") {
 ohos_shared_library("av_codec_media_engine_modules") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":av_codec_media_engine_modules_config",

services/media_engine/plugins/ffmpeg_adapter/BUILD.gn

@@ -52,11 +52,7 @@ config("ffmpeg_adapter_config") {
 ohos_shared_library("media_plugin_FFmpegMuxer") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":ffmpeg_adapter_config",
@@ -85,11 +81,7 @@ ohos_shared_library("media_plugin_FFmpegMuxer") {
 ohos_shared_library("media_plugin_FFmpegDemuxer") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":ffmpeg_adapter_config",

services/media_engine/plugins/sink/BUILD.gn

@@ -46,11 +46,7 @@ config("audio_server_sink_plugin_config") {
 ohos_shared_library("media_plugin_AudioServerSink") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":audio_server_sink_plugin_config",

services/media_engine/plugins/source/BUILD.gn

@@ -51,11 +51,7 @@ config("Source_config") {
 ohos_shared_library("media_plugin_FileFdSource") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":Source_config",
@@ -109,11 +105,7 @@ ohos_shared_library("media_plugin_FileSource") {
 ohos_shared_library("media_plugin_DataStreamSource") {
   install_enable = true
 
-  sanitize = {
-    cfi = true
-    cfi_cross_dso = true
-    debug = false
-  }
+  sanitize = av_codec_sanitize
 
   configs = [
     ":Source_config",