[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound
--------------------------------------+-----------------------
 Reporter:  mikeperry                 |          Owner:  erinn
     Type:  enhancement               |         Status:  new
 Priority:  major                     |      Milestone:
Component:  Tor bundles/installation  |        Version:
 Keywords:  gitian, tbb-security      |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+-----------------------
 We should see if we can get TBB to build with SoftBound+CETS, a memory-
 safety extension to LLVM: http://acg.cis.upenn.edu/softbound/

 Apparently to get full benefit we may need to annotate the Mozilla
 allocator, but we should be able make a test build without that annotation
 (it will just treat the entire malloc pool as one allocation).

 Other resources:
 * https://events.ccc.de/congress/2013/Fahrplan/events/5412.html (CCC talk
 about building FreeBSD with Softbound)
 * http://media.ccc.de/browse/congress/2013/30C3_-_5412_-_en_-_saal_1_-
 _201312271830_-_bug_class_genocide_-_andreas_bogk.html (Video for the
 same)
 * http://blog.regehr.org/archives/939 (see especially the comments)
 * http://lists.cs.uiuc.edu/pipermail/llvmdev/2012-April/048569.html
 (Related projects to SoftBound, including some enhancements/alternatives)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online