Added initial configuration for BSAN.

Specified bsan branch of LLVM submodule.

Added Borrow sanitizer options to frontend.

Added additional configuration flags for BSAN.

Updated llvm submodule and ensured that retags are allowed in subsequent MIR passes.

Updated LLVM project.

Author: icmccorm

.github/workflows/sync.yml

@@ -0,0 +1,27 @@
+name: sync
+on: workflow_dispatch
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+defaults:
+  run:
+    shell: bash
+concurrency:
+  group: "sync"
+  cancel-in-progress: true
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Identity
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Rebase
+        run: src/ci/scripts/sync.sh
+      - name: Build
+        run: ./x.py build --stage 1 library

.gitmodules

@@ -54,4 +54,4 @@
 [submodule "src/gcc"]
 	path = src/gcc
 	url = https://github.com/rust-lang/gcc.git
-	shallow = true
+	shallow = true

Cargo.lock

@@ -290,6 +290,10 @@ dependencies = [
  "generic-array",
 ]
 
+[[package]]
+name = "bsan"
+version = "0.1.0"
+
 [[package]]
 name = "bstr"
 version = "1.10.0"

Cargo.toml

@@ -7,6 +7,7 @@ members = [
   "src/rustc-std-workspace/rustc-std-workspace-alloc",
   "src/rustc-std-workspace/rustc-std-workspace-std",
   "src/rustdoc-json-types",
+  "src/tools/bsan",
   "src/tools/build_helper",
   "src/tools/cargotest",
   "src/tools/clippy",

compiler/rustc_borrowck/src/lib.rs

@@ -36,13 +36,13 @@ use rustc_middle::mir::*;
 use rustc_middle::query::Providers;
 use rustc_middle::ty::{self, ParamEnv, RegionVid, TyCtxt, TypingMode};
 use rustc_middle::{bug, span_bug};
-use rustc_mir_dataflow::Analysis;
 use rustc_mir_dataflow::impls::{
     EverInitializedPlaces, MaybeInitializedPlaces, MaybeUninitializedPlaces,
 };
 use rustc_mir_dataflow::move_paths::{
     InitIndex, InitLocation, LookupResult, MoveData, MoveOutIndex, MovePathIndex,
 };
+use rustc_mir_dataflow::Analysis;
 use rustc_session::lint::builtin::UNUSED_MUT;
 use rustc_span::{Span, Symbol};
 use smallvec::SmallVec;
@@ -656,8 +656,12 @@ impl<'a, 'tcx, R> rustc_mir_dataflow::ResultsVisitor<'a, 'tcx, R>
                     state,
                 );
             }
+            StatementKind::Retag { .. } => {
+                if !self.infcx.tcx.sess.emit_retags() {
+                    bug!("Statement not allowed in this MIR phase")
+                }
+            }
             StatementKind::Nop
-            | StatementKind::Retag { .. }
             | StatementKind::Deinit(..)
             | StatementKind::SetDiscriminant { .. } => {
                 bug!("Statement not allowed in this MIR phase")
@@ -1771,11 +1775,11 @@ impl<'a, 'tcx> MirBorrowckCtxt<'a, '_, 'tcx> {
                 mpi,
             );
         } // Only query longest prefix with a MovePath, not further
-        // ancestors; dataflow recurs on children when parents
-        // move (to support partial (re)inits).
-        //
-        // (I.e., querying parents breaks scenario 7; but may want
-        // to do such a query based on partial-init feature-gate.)
+          // ancestors; dataflow recurs on children when parents
+          // move (to support partial (re)inits).
+          //
+          // (I.e., querying parents breaks scenario 7; but may want
+          // to do such a query based on partial-init feature-gate.)
     }
 
     /// Subslices correspond to multiple move paths, so we iterate through the

compiler/rustc_borrowck/src/type_check/mod.rs

@@ -1258,10 +1258,14 @@ impl<'a, 'tcx> TypeChecker<'a, 'tcx> {
                     "Unexpected NonDivergingIntrinsic::CopyNonOverlapping, should only appear after lowering_intrinsics",
                 ),
             },
+            StatementKind::Retag { .. } => {
+                if !self.infcx.tcx.sess.emit_retags() {
+                    bug!("Statement not allowed in this MIR phase")
+                }
+            },
             StatementKind::FakeRead(..)
             | StatementKind::StorageLive(..)
             | StatementKind::StorageDead(..)
-            | StatementKind::Retag { .. }
             | StatementKind::Coverage(..)
             | StatementKind::ConstEvalCounter
             | StatementKind::PlaceMention(..)

compiler/rustc_codegen_llvm/src/attributes.rs

@@ -114,6 +114,9 @@ pub(crate) fn sanitize_attrs<'ll>(
     if enabled.contains(SanitizerSet::SAFESTACK) {
         attrs.push(llvm::AttributeKind::SanitizeSafeStack.create_attr(cx.llcx));
     }
+    if enabled.contains(SanitizerSet::BORROW) {
+        attrs.push(llvm::AttributeKind::SanitizeBorrow.create_attr(cx.llcx));
+    }
     attrs
 }
 

compiler/rustc_codegen_llvm/src/back/write.rs

@@ -553,6 +553,7 @@ pub(crate) unsafe fn llvm_optimize(
             sanitize_kernel_address_recover: config
                 .sanitizer_recover
                 .contains(SanitizerSet::KERNELADDRESS),
+            sanitize_borrow: config.sanitizer.contains(SanitizerSet::BORROW),
         })
     } else {
         None

compiler/rustc_codegen_llvm/src/llvm/ffi.rs

@@ -252,6 +252,7 @@ pub enum AttributeKind {
     FnRetThunkExtern = 41,
     Writable = 42,
     DeadOnUnwind = 43,
+    SanitizeBorrow = 44,
 }
 
 /// LLVMIntPredicate
@@ -541,6 +542,7 @@ pub struct SanitizerOptions {
     pub sanitize_hwaddress_recover: bool,
     pub sanitize_kernel_address: bool,
     pub sanitize_kernel_address_recover: bool,
+    pub sanitize_borrow: bool,
 }
 
 /// LLVMRelocMode