Google GitGoogle Git
Sign in
android/platform/external/lfi/lfi-runtime/d41dba19d65193dcc81ad382eaa07a05717cdc9e
commit
d41dba19d65193dcc81ad382eaa07a05717cdc9e
[log]
author
Sharjeel Khan <sharjeelkhan@google.com>
Thu Mar 12 21:15:11 2026 +0000
committer
Sharjeel Khan <sharjeelkhan@google.com>
Fri Mar 13 10:58:08 2026 +0000
tree
399968c4fe6f1dc8950a27b62d5e8d16ff56f3b3
parent
71b012796e96bb6b18e84c2be8c2e25cc7ae8040 [diff]
parent
dbe02592c0e860ffce90bbe76a7c1a2f37ef6750 [diff]
Upgrade lfi-runtime to dbe02592c0e860ffce90bbe76a7c1a2f37ef6750

This project was upgraded with external_updater.
Usage: tools/external_updater/updater.sh update external/lfi/lfi-runtime
For more info, check https://cs.android.com/android/platform/superproject/main/+/main:tools/external_updater/README.md

I additionally added liblog as a shared library for logging.

Bug: 491482999
Bug: 491542512
Test: TreeHugger
Test: lunch blazer-trunk_staging-userdebug && m
Test: Flashing local build and checking logcat
Test: atest MctsMediaV2TestCases -- --module-arg MctsMediaV2TestCases:instrumentation-arg:codec-prefix:=c2.android.inproc.opus.decoder
Change-Id: Id575347faab5fbe8f210f68feb27ead10248cd77
tree: 399968c4fe6f1dc8950a27b62d5e8d16ff56f3b3
  1. .github/
  2. core/
  3. linux/
  4. subprojects/
  5. toolchains/
  6. tools/
  7. .clang-format
  8. .gitignore
  9. Android.bp
  10. config.h
  11. LICENSE
  12. meson.build
  13. meson_options.txt
  14. METADATA
  15. MODULE_LICENSE_MIT
  16. OWNERS
  17. README.md
README.md

LFI Runtime

The LFI runtime is responsible for loading sandboxes and handling host calls. It is split into two sub-components:

  • core: provides functionality for reserving virtual address space, mapping sandbox memory, transferring control to/from the sandbox. It does not impose any runtime API on the sandbox beyond the minimum necessary.
  • linux: provides a Linux emulation layer on top of the core library.

Installation

meson setup build
cd build
ninja

This produces liblfi, along with the lfi-run tool that can be used to run binaries at the command-line.

See core/include/lfi_core.h and linux/include/lfi_linux.h for the API provided by liblfi.

Platform Support

The runtime currently targets Linux for Arm64 and x86-64. There is also experimental support for macOS (futexes are not yet supported), and support for RISC-V is in-progress.

Usage

Usage: lfi-run [OPTION...] INPUT...

  -h, --help                show help
  -V, --verbose             verbose output
  --perf                    enable perf support
  -v, --verify              enable verification
  -p, --sys-passthrough     pass most system calls directly to the host
  --pagesize=<int>          system page size
  --env=<var=val>           set environment variable
  --dir=<box=host>          map sandbox path to host directory
  --wd=<dir>                working directory within sandbox
  -r, --restricted          apply --dir and --wd flags (default is --dir /=/ --wd $PWD for testing)
  <input>                   input command