[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 We are pretty close I guess. After resolving issues with the linker (I got
 {{{
 /usr/bin/ld.bfd.real: js: hidden symbol `__asan_default_options' in
 ../libjs_static.a(AsmJSSignalHandlers.o) is referenced by DSO
 /usr/bin/ld.bfd.real: final link failed: Nonrepresentable section on
 output
 collect2: error: ld returned 1 exit status
 }}}
 with the ld lucid ships and a self-compiled using binutils 2.22) by using
 a binutils > 2.22 everything compiles and links properly it seems.
 However, the packaging step breaks with
 {{{
 =================================================================
 ==21490== ERROR: AddressSanitizer: stack-buffer-overflow on address
 0xbfb0fe5c at pc 0x44edca29 bp 0xbfb0fdf4 sp 0xbfb0fde8
 WRITE of size 4 at 0xbfb0fe5c thread T0
     #0 0x44edca28 (/home/ubuntu/build/tor-browser/obj-i686-pc-linux-
 gnu/toolkit/library/libxul.so+0x38b6a28)
     #1 0x489325b7 (/lib/tls/i686/cmov/libc-2.11.1.so+0x2f5b7)
 ASAN:SIGSEGV
 ==21490== AddressSanitizer: while reporting a bug found another
 one.Ignoring.
 Traceback (most recent call last):
   File "/home/ubuntu/build/tor-
 browser/toolkit/mozapps/installer/packager.py", line 375, in <module>
     main()
   File "/home/ubuntu/build/tor-
 browser/toolkit/mozapps/installer/packager.py", line 367, in main
     args.source, gre_path, base)
   File "/home/ubuntu/build/tor-
 browser/toolkit/mozapps/installer/packager.py", line 148, in
 precompile_cache
     errors.fatal('Error while running startup cache precompilation')
   File "/home/ubuntu/build/tor-browser/python/mozbuild/mozpack/errors.py",
 line 101, in fatal
     self._handle(self.FATAL, msg)
   File "/home/ubuntu/build/tor-browser/python/mozbuild/mozpack/errors.py",
 line 96, in _handle
     raise ErrorMessage(msg)
 mozpack.errors.ErrorMessage: Error: Error while running startup cache
 precompilation
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online