[tor-bugs] #5400 [Tor bundles/installation]: ASLR broken by non-ASLR DLLs

[Tor Bug Tracker & Wiki]

#5400: ASLR broken by non-ASLR DLLs
--------------------------------------+-------------------------------------
 Reporter:  funkstar                  |          Owner:  erinn               
     Type:  defect                    |         Status:  new                 
 Priority:  normal                    |      Milestone:                      
Component:  Tor bundles/installation  |        Version:  Vidalia: 0.3.1-alpha
 Keywords:                            |         Parent:                      
   Points:                            |   Actualpoints:                      
--------------------------------------+-------------------------------------

Comment(by Shondoit):

 Replying to [comment:5 funkstar]:
 > Just wondering if any progress on this?
 For Windows we have a proposed patch to start building Qt from source.
 (See #5746)
 Basically, when this gets merged it should all be ASLR enabled.
 I analyzed the resulting binaries from that branch and all of them have
 'dynamic base' and 'NX compatible' flags. (Apart from 'Start Tor
 Browser.exe', but this gets closed right away anyway.)

 Replying to [comment:6 Sebastian]:
 > Partial progress, yes. We build Qt from source, but I haven't yet
 figured out how to get ASLR for mingw/libgcc. I wonder if we need to build
 that, too. That'd be rather insane tho.
 Oh ye o' little faith. Statically building Vidalia removes these
 dependencies. (As long as we add -static-libgcc, which I did)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5400#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online