Annotate Cross task dangling pointers detected on Linux builds
This adds the DanglingAcrossTasks keyword and annotates raw_ptrs that
are "dangling cross task", i.e. that are freed and released in
different tasks.
These are more likely to allow UAFs and therefore are prioritized
over other dangling raw_ptr (Those remaining with DanglingUntriaged).
Protocol used:
1. Apply automatic dangling pointer annotation: crrev.com/c/4474553
2. Disable "DanglingUntriaged":
``` base/allocator/partition_allocator/pointers/raw_ptr.h:
constexpr auto DanglingUntriaged = base::RawPtrTraits::kEmpty ```
3. Configure Dangling pointer detection for cross tasks detection and logging only.
4. Run all tests using https://docs.google.com/document/d/1AMMERcqy0eafFWopUCHYsIKIKEp3J8DFxqW9UIbzIHo/edit?pli=1&resourcekey=0-e12-tlqsWfAOkle97uWw3w
5. Concatenate and filter output:
``` cat output_* | sort -nr | uniq | sed -e 's/\(.\)Found/\1\nFound/g' | grep -a -e "../../" | sed 's_^.*\.\./\.\./__' | sort | uniq > test_output_all
6. Apply the annotation using https://docs.google.com/document/d/1SGMZAaoEb6J0-NQO5V07TShxGAL5bxVN08TylBOrSCw/edit?usp=sharing
Change-Id: If176e8f7269ec4a95976e351e9b35a5cb8e4c699
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4567353
Reviewed-by: Arthur Sonzogni <arthursonzogni@chromium.org>
Reviewed-by: danakj <danakj@chromium.org>
Auto-Submit: Pâris Meuleman <pmeuleman@chromium.org>
Reviewed-by: Bartek Nowierski <bartekn@chromium.org>
Commit-Queue: Pâris Meuleman <pmeuleman@chromium.org>
Owners-Override: danakj <danakj@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1162824}
NOKEYCHECK=True
GitOrigin-RevId: 4332a2f3be882f937dcb8ae8e205d910d786b20a
2 files changed
