[tor-bugs] #5131 [Obfsproxy]: auditing obfsproxy

[Tor Bug Tracker & Wiki]

#5131: auditing obfsproxy
-------------------------+--------------------------------------------------
 Reporter:  ioerror      |          Owner:  asn         
     Type:  enhancement  |         Status:  needs_review
 Priority:  normal       |      Milestone:              
Component:  Obfsproxy    |        Version:              
 Keywords:  security     |         Parent:              
   Points:               |   Actualpoints:              
-------------------------+--------------------------------------------------

Comment(by Sebastian):

 No it's on purpose, check the m4/ax_check_compile_flag.m4 file:

 {{{
 #   Check whether the given FLAG works with the current language's
 compiler
 #   or gives an error.  (Warnings, however, are ignored)
 }}}

 configure says:
 {{{

 checking whether C compiler accepts -D_FORTIFY_SOURCE=2... yes
 checking whether C compiler accepts -fstack-protector-all... yes
 checking whether C compiler accepts -fwrapv... yes
 checking whether C compiler accepts -fPIE... yes
 checking whether C compiler accepts --param ssp-buffer-size=1... yes
 checking whether C compiler accepts -fno-strict-aliasing... yes
 checking whether C compiler accepts -fno-strict-overflow... yes
 checking whether the linker accepts -pie... yes
 checking whether the linker accepts -z relro... no
 checking whether the linker accepts -z now... no
 }}}

 So this works as intended by the authors of the ax_check_compile_flag.m4,
 but it sounds like not as you intended?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5131#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online