Add `-Zsanitize=kernel-hwaddress` by Darksonn · Pull Request #153049 · rust-lang/rust

Darksonn · 2026-02-24T14:39:37Z

The Linux kernel has a config option called CONFIG_KASAN_SW_TAGS that enables -fsanitize=kernel-hwaddress. This is not supported by Rust.

One slightly awkward detail is that #[sanitize(address = "off")] applies to both -Zsanitize=address and -Zsanitize=kernel-address. Probably it was done this way because both are the same LLVM pass. I replicated this logic here for hwaddress, but it might be undesirable.

Note that #[sanitize(kernel_hwaddress = "off")] could be supported as an annotation on statics, but since it's also missing for #[sanitize(hwaddress = "off")], I did not add it.

MCP: rust-lang/compiler-team#975
Tracking issue: #154171

cc @rcvalle @maurer @ojeda

Darksonn · 2026-03-07T12:42:12Z

compiler/rustc_codegen_llvm/src/llvm_util.rs

+        // KHWASAN: In LLVM versions prior to 21.1.0, the HWAddressSanitizer pass incorrectly
+        // ignores the pass-specific `CompileKernel` flag and only looks at the global command-line
+        // flag `-hwasan-kernel`. To work around this, pass `-hwasan-kernel` on the relevant LLVM
+        // versions.
+        //
+        // Fixed by: [HWASan][bugfix] Fix kernel check in ShadowMapping::init (#142226).
+        if sess.sanitizers().contains(SanitizerSet::KERNELHWADDRESS) && get_version() < (21, 1, 0) {
+            add("-hwasan-kernel", false);
+        }


@fmayer Is this reasonable a reasonable fix for rustc to work around the lack of llvm/llvm-project#142226? Or do you think I should pass this on all versions? Thanks!

rustbot · 2026-03-07T16:19:25Z

Some changes occurred in cfg and check-cfg configuration

cc @Urgau

Some changes occurred in tests/ui/sanitizer

cc @rcvalle

Some changes occurred in src/tools/compiletest

cc @jieyouxu

Some changes occurred in tests/codegen-llvm/sanitizer

cc @rcvalle

Some changes occurred in compiler/rustc_attr_parsing

cc @jdonszelmann, @JonathanBrouwer

rustbot · 2026-03-07T16:19:27Z

r? @chenyukang

rustbot has assigned @chenyukang.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

Why was this reviewer chosen?

The reviewer was selected based on:

Owners of files modified in this PR: compiler
compiler expanded to 69 candidates
Random selection from 16 candidates

rcvalle · 2026-03-14T03:41:57Z

cc @1c3t3a @jakos-sec

Add `-Zsanitize=kernel-hwaddress` try-job: test-various try-job: aarch64-gnu

rustbot · 2026-03-24T17:46:43Z

Some changes occurred in src/doc/unstable-book/src/compiler-flags/sanitizer.md

cc @rust-lang/project-exploit-mitigations, @rcvalle

compiletest directives have been modified. Please add or update docs for the
new or modified directive in src/doc/rustc-dev-guide/.

These commits modify compiler targets.
(See the Target Tier Policy.)

Darksonn · 2026-03-24T17:47:00Z

@rustbot ready

rust-bors · 2026-03-24T19:11:23Z

☀️ Try build successful (CI)
Build commit: 6ca6a86 (6ca6a8630bd864d73f6922a0a95b501387897d05, parent: 0312931d8c0ba1a28268a12c06202b68cbc65f76)

fmease · 2026-03-24T22:29:20Z

Thanks! @bors r+

rust-bors · 2026-03-24T22:29:23Z

📌 Commit 4d86840 has been approved by fmease

It is now in the queue for this repository.

@rcvalle

Add `-Zsanitize=kernel-hwaddress` The Linux kernel has a config option called `CONFIG_KASAN_SW_TAGS` that enables `-fsanitize=kernel-hwaddress`. This is not supported by Rust. One slightly awkward detail is that `#[sanitize(address = "off")]` applies to both `-Zsanitize=address` and `-Zsanitize=kernel-address`. Probably it was done this way because both are the same LLVM pass. I replicated this logic here for hwaddress, but it might be undesirable. Note that `#[sanitize(kernel_hwaddress = "off")]` could be supported as an annotation on statics, but since it's also missing for `#[sanitize(hwaddress = "off")]`, I did not add it. MCP: rust-lang/compiler-team#975 Tracking issue: rust-lang#154171 cc @rcvalle @maurer @ojeda

Rollup of 6 pull requests Successful merges: - #154004 (`Alignment`: move from `ptr` to `mem` and rename `as_nonzero` to `as_nonzero_usize`) - #153049 (Add `-Zsanitize=kernel-hwaddress`) - #154269 (miri recursive validation: only check one layer deep) - #154112 (some `tests/ui/macros` cleanup) - #154131 (begin `tests/ui/structs-enums` cleanup) - #154233 (Move ui/issues tests to relevant subdirectories)

@rcvalle

Add `-Zsanitize=kernel-hwaddress` The Linux kernel has a config option called `CONFIG_KASAN_SW_TAGS` that enables `-fsanitize=kernel-hwaddress`. This is not supported by Rust. One slightly awkward detail is that `#[sanitize(address = "off")]` applies to both `-Zsanitize=address` and `-Zsanitize=kernel-address`. Probably it was done this way because both are the same LLVM pass. I replicated this logic here for hwaddress, but it might be undesirable. Note that `#[sanitize(kernel_hwaddress = "off")]` could be supported as an annotation on statics, but since it's also missing for `#[sanitize(hwaddress = "off")]`, I did not add it. MCP: rust-lang/compiler-team#975 Tracking issue: rust-lang#154171 cc @rcvalle @maurer @ojeda

Rollup of 5 pull requests Successful merges: - #153049 (Add `-Zsanitize=kernel-hwaddress`) - #154269 (miri recursive validation: only check one layer deep) - #154112 (some `tests/ui/macros` cleanup) - #154131 (begin `tests/ui/structs-enums` cleanup) - #154233 (Move ui/issues tests to relevant subdirectories)

@rcvalle

Add `-Zsanitize=kernel-hwaddress` The Linux kernel has a config option called `CONFIG_KASAN_SW_TAGS` that enables `-fsanitize=kernel-hwaddress`. This is not supported by Rust. One slightly awkward detail is that `#[sanitize(address = "off")]` applies to both `-Zsanitize=address` and `-Zsanitize=kernel-address`. Probably it was done this way because both are the same LLVM pass. I replicated this logic here for hwaddress, but it might be undesirable. Note that `#[sanitize(kernel_hwaddress = "off")]` could be supported as an annotation on statics, but since it's also missing for `#[sanitize(hwaddress = "off")]`, I did not add it. MCP: rust-lang/compiler-team#975 Tracking issue: rust-lang#154171 cc @rcvalle @maurer @ojeda

…uwer Rollup of 22 pull requests Successful merges: - #153049 (Add `-Zsanitize=kernel-hwaddress`) - #153702 (Add macro matcher for `guard` fragment specifier) - #154200 (debuginfo: emit DW_TAG_call_site entries) - #154263 (interpret: when passing an argument fails, point at that argument) - #154269 (miri recursive validation: only check one layer deep) - #154313 (Init `self_decl` with a correct visibility) - #154344 (Update LLVM to 22.1.2) - #154348 (re-enable enzyme/autodiff builds on dist-aarch64-apple) - #154351 (Overhaul `Erasable` impls) - #154363 (delegation: fix zero-args nested delegation ICE) - #154364 (delegation: don't propagate synthetic params, remove lifetime hacks) - #151148 (Add functions to `GrowableBitSet`) - #154090 (Move tests in the statics category) - #154112 (some `tests/ui/macros` cleanup) - #154131 (begin `tests/ui/structs-enums` cleanup) - #154216 (unstably mark `NonNull::with_exposed_provenance` as const) - #154230 (Moved and rename issue-50411 to tests/ui/mir/inliner-double-elaborate) - #154233 (Move ui/issues tests to relevant subdirectories) - #154288 (Fix typo in doc comment for `char::to_titlecase`) - #154355 (delegation: add const type ICE test) - #154358 (install-template.sh: Optimize by using Bourne shell builtins.) - #154360 (fromrangeiter-overflow-checks: accept optional `signext` for argument)

Fix minor kasan bugs Fixes a few minor bugs discovered during rust-lang/rust#153049.

…uwer Rollup of 22 pull requests Successful merges: - rust-lang/rust#153049 (Add `-Zsanitize=kernel-hwaddress`) - rust-lang/rust#153702 (Add macro matcher for `guard` fragment specifier) - rust-lang/rust#154200 (debuginfo: emit DW_TAG_call_site entries) - rust-lang/rust#154263 (interpret: when passing an argument fails, point at that argument) - rust-lang/rust#154269 (miri recursive validation: only check one layer deep) - rust-lang/rust#154313 (Init `self_decl` with a correct visibility) - rust-lang/rust#154344 (Update LLVM to 22.1.2) - rust-lang/rust#154348 (re-enable enzyme/autodiff builds on dist-aarch64-apple) - rust-lang/rust#154351 (Overhaul `Erasable` impls) - rust-lang/rust#154363 (delegation: fix zero-args nested delegation ICE) - rust-lang/rust#154364 (delegation: don't propagate synthetic params, remove lifetime hacks) - rust-lang/rust#151148 (Add functions to `GrowableBitSet`) - rust-lang/rust#154090 (Move tests in the statics category) - rust-lang/rust#154112 (some `tests/ui/macros` cleanup) - rust-lang/rust#154131 (begin `tests/ui/structs-enums` cleanup) - rust-lang/rust#154216 (unstably mark `NonNull::with_exposed_provenance` as const) - rust-lang/rust#154230 (Moved and rename issue-50411 to tests/ui/mir/inliner-double-elaborate) - rust-lang/rust#154233 (Move ui/issues tests to relevant subdirectories) - rust-lang/rust#154288 (Fix typo in doc comment for `char::to_titlecase`) - rust-lang/rust#154355 (delegation: add const type ICE test) - rust-lang/rust#154358 (install-template.sh: Optimize by using Bourne shell builtins.) - rust-lang/rust#154360 (fromrangeiter-overflow-checks: accept optional `signext` for argument)

This adds support for Software Tag-Based KASAN (KASAN_SW_TAGS) when CONFIG_RUST is enabled. This requires that rustc includes support for the kernel-hwaddress sanitizer, which is available since 1.96.0 [1]. Link: rust-lang/rust#153049 [1] Signed-off-by: Alice Ryhl <aliceryhl@google.com>

Darksonn added the A-sanitizers Area: Sanitizers for correctness and code quality label Feb 24, 2026

Darksonn force-pushed the kasan-sw-tags branch from 1191bc5 to 07c2a2a Compare February 24, 2026 14:52

This comment has been minimized.

Sign in to view

Darksonn force-pushed the kasan-sw-tags branch from 07c2a2a to 9508e21 Compare February 24, 2026 15:09

This comment has been minimized.

Sign in to view

ojeda mentioned this pull request Feb 24, 2026

rustc wanted features & bugfixes Rust-for-Linux/linux#355

Open

70 tasks

Darksonn force-pushed the kasan-sw-tags branch from 9508e21 to c7a338e Compare February 27, 2026 10:57

This comment has been minimized.

Sign in to view

Darksonn commented Mar 7, 2026

View reviewed changes

This comment has been minimized.

Sign in to view

Darksonn force-pushed the kasan-sw-tags branch from 941168b to 83e2f79 Compare March 7, 2026 14:24

Darksonn marked this pull request as ready for review March 7, 2026 16:19

rustbot added the S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. label Mar 7, 2026

rustbot removed the S-waiting-on-author Status: This is awaiting some action (such as code changes or more information) from the author. label Mar 7, 2026

rustbot assigned chenyukang Mar 7, 2026

Darksonn mentioned this pull request Mar 10, 2026

Add -Zsanitizer=kernel-hwaddress rust-lang/compiler-team#975

Closed

3 tasks

Darksonn force-pushed the kasan-sw-tags branch from 83e2f79 to 643c38c Compare March 15, 2026 11:53

This comment has been minimized.

Sign in to view

rust-bors bot pushed a commit that referenced this pull request Mar 24, 2026

Auto merge of #153049 - Darksonn:kasan-sw-tags, r=<try>

6ca6a86

Add `-Zsanitize=kernel-hwaddress` try-job: test-various try-job: aarch64-gnu

This comment has been minimized.

Sign in to view

fmease added S-waiting-on-author Status: This is awaiting some action (such as code changes or more information) from the author. and removed S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. labels Mar 24, 2026

Darksonn added 2 commits March 24, 2026 17:39

Do not check for LEAK & KERNELHWADDRESS because they are incompatible

422906d

Document kernel-hwaddress in Unstable Book

4d86840

rustbot added S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. and removed S-waiting-on-author Status: This is awaiting some action (such as code changes or more information) from the author. labels Mar 24, 2026

rust-bors bot added S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. and removed S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. labels Mar 24, 2026

jhpratt mentioned this pull request Mar 25, 2026

Rollup of 6 pull requests #154347

Closed

jhpratt mentioned this pull request Mar 25, 2026

Rollup of 5 pull requests #154353

Closed

This was referenced Mar 25, 2026

Rollup of 21 pull requests #154378

Closed

Rollup of 22 pull requests #154384

Merged

rust-bors bot merged commit 0cd8de3 into rust-lang:main Mar 25, 2026
11 checks passed

github-actions bot pushed a commit to rust-lang/stdarch that referenced this pull request Mar 26, 2026

Rollup merge of #153965 - Darksonn:kasan-minor-bugs, r=JonathanBrouwer

ebed523

Fix minor kasan bugs Fixes a few minor bugs discovered during rust-lang/rust#153049.

Darksonn deleted the kasan-sw-tags branch March 26, 2026 08:06

Uh oh!

Conversation

Darksonn commented Feb 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

Darksonn Mar 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

This comment has been minimized.

rustbot commented Mar 7, 2026

Uh oh!

rustbot commented Mar 7, 2026

Uh oh!

rcvalle commented Mar 14, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

rustbot commented Mar 24, 2026

Uh oh!

Darksonn commented Mar 24, 2026

Uh oh!

rust-bors bot commented Mar 24, 2026

Uh oh!

fmease commented Mar 24, 2026

Uh oh!

rust-bors bot commented Mar 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Darksonn commented Feb 24, 2026 •

edited

Loading

Darksonn Mar 7, 2026 •

edited

Loading