[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

Mon Jun 23 13:45:38 UTC 2014

#10599: Investigate building TBB with SoftBound or AddressSanitizer
-------------------------------------+-------------------------------------
     Reporter:  mikeperry            |      Owner:  erinn
         Type:  enhancement          |     Status:  new
     Priority:  major                |  Milestone:
    Component:  Tor                  |    Version:
  bundles/installation               |   Keywords:  gitian, tbb-security,
   Resolution:                       |  TorBrowserTeam201406
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by gk):

 I uploaded a working build with ASan, UBSan and VTV to
 https://people.torproject.org/~gk/testbuilds/asan/20140620/.

 They are currently compiled with "-fvtable-verify=std". "-fvtable-
 verify=preinit" does not work with ld but using gold seems to be fine.
 I'll add that piece in the next iteration of these builds. In order to
 avoid the browser exiting on VTV errors the compiler is built with
 -DVTV_NO_ABORT.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:37>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online