Conversation

Now that we've worked around an incredibly cursed compiler bug, we appear to have all the Android 12 GrapheneOS kernels working properly. We'll be making an experimental release of the GrapheneOS Android 11 branch with Android 12 kernels. It won't be pushed out to Beta though.
1
25
If we can get people to help us with testing and everything is working properly, then we can consider pushing out that kind of release to the Beta and then Stable channels. Ideally, we could release the Android 12 kernels early so that one major part of 12 is shipped already.
Replying to
The update of the kernel Clang/LLVM toolchain to 12.0.x in Android 12 caused a concerning regressing for all the 4th (sunfish, coral and flame) and 5th (barbet, redfin, bramble) generation Pixels. It breaks pointer range comparisons by a minor sanity check we've been enabling...
1
7
CONFIG_DEBUG_NOTIFIERS adds pointer range sanity checks before calling notifier function pointers. It doesn't really improve security due to type-based CFI and PAN+UAO but we were enabling it anyway. Somehow new Clang is breaking these checks... which is likely spec-compliant.
7