Jan Svoboda 8e999e3d78 [llvm][clang] Sandbox filesystem reads (#165350) ...

This PR introduces a new mechanism for enforcing a sandbox around
filesystem reads coming from the compiler. A fatal error is raised
whenever the `llvm::sys::fs`, `llvm::MemoryBuffer::getFile*()` APIs get
used directly instead of going through the "blessed" virtual interface
of `llvm::vfs::FileSystem`.

2025-12-11 15:42:13 -08:00

9.7 KiB

Raw Blame History

View Raw