LLVM’s Real-time Safety Revolution Tools for Modern Mission Critical SystemsChris Apple ● 10-year veteran of the audio industry ● Previously Dolby, Roblox, Spatial Inc. ● Currently: layabout David REAL(malloc)(size); } INTERCEPTOR (void *, malloc, size_t size) { return REAL(malloc)(size); } LLVM Intermediate Representation (IR) compilation step lightweight runtime library void __rtsan_realtime_enter() each tool outside of LLVM ContrastAgenda 1. Run time vs compile time 2. False negatives and false positives 3. Cost 4. Disabling each tool 5. Using each tool outside of LLVM ContrastRun time Compile

-- Detecting CXX compiler ABI info - done -- Check for working CXX compiler: /Users/hoffman/Work/llvm/llvm-inst/bin/clang++ - skipped -- Detecting CXX compile features -- Detecting CXX compile features - $hoffman@caprica b % ninja -v [1/10] "/Users/hoffman/Work/llvm/llvm-inst/bin/clang-scan-deps" -format=p1689 -- /Users/hoffman/Work/llvm/llvm-inst/bin/clang++ -std=gnu++20 -arch arm64 -isysroot /Li ules/simple/main.cxx -c -o CMakeFiles/hello.dir/main.cxx.o -resource-dir "/Users/hoffman/Work/llvm/llvm-inst/lib/clang/20" -MT CMakeFiles/hello.dir/main.cxx.o.ddi -MD -MF CMakeFiles/hello.dir/main.cxx

System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running a pre-flight DaemonSet Upgrading Micro Versions behavior appropriate for each container. Compiles the BPF programs to bytecode using clang/LLVM [h�ps://clang.llvm.org/] and passes them to the Linux kernel to run for all packets in / out of the container’s running the cilium/cilium container image) these addi�onal requirements must be met: clang+LLVM [h�ps://llvm.org] >=5.0 (Recommended: >=7.0) iproute2 [h�ps://www.kernel.org/pub/linux/u�ls/net/iproute2/]

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1246 58 C Interface 1247 59 LLVM Interface 1264 60 C Standard Library 1265 61 StackTraces 1271 62 SIMD Support 1273 III Standard . . . . . . . . . . . . 1841 104.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1842 104.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1246 58 C Interface 1247 59 LLVM Interface 1264 60 C Standard Library 1265 61 StackTraces 1271 62 SIMD Support 1273 III Standard . . . . . . . . . . . . 1843 104.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1844 104.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1248 58 C Interface 1249 59 LLVM Interface 1266 60 C Standard Library 1267 61 StackTraces 1273 62 SIMD Support 1275 III Standard . . . . . . . . . . . . 1845 104.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1846 104.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1246 58 C Interface 1247 59 LLVM Interface 1264 60 C Standard Library 1265 61 StackTraces 1271 62 SIMD Support 1273 III Standard . . . . . . . . . . . . 1841 104.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1842 104.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1241 58 C Interface 1242 59 LLVM Interface 1259 60 C Standard Library 1260 61 StackTraces 1266 62 SIMD Support 1268 III Standard . . . . . . . . . . . . 1839 106.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1840 106.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1228 57 C Interface 1229 58 LLVM Interface 1246 59 C Standard Library 1247 60 StackTraces 1253 61 SIMD Support 1255 III Standard . . . . . . . . . . . . 1868 108.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1869 108.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming

compiled representations . . . . . . . . . . . . . . . . . . . . . . 1222 57 C Interface 1223 58 LLVM Interface 1240 59 C Standard Library 1241 60 StackTraces 1247 61 SIMD Support 1249 III Standard . . . . . . . . . . . . 1862 108.15 Custom LLVM Passes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1863 108.16 Working with LLVM . . . . . . . . . . . . . . . . . . . . . . inference and just-in-time (JIT) compilation (and optional ahead-of-time compilation), implemented using LLVM. It is multi-paradigm, combining features of imperative, functional, and object-oriented programming