[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 Replying to [comment:13 mikeperry]:
 > gk: random idea: What if we told Firefox that the ASAN compiler was a
 cross compiler? Then the host gcc should build that libxul library, and
 use non-ASAN hardened tools in the packaging step, and this should avoid
 the crash during packaging?

 That might be a smart idea. There is actually a section in the example
 .mozconfig that I omitted which might help us here:
 {{{
 # Avoid using ASan flags when building host tools like nsinstall
 export HOST_CFLAGS=" "
 export HOST_CXXFLAGS=" "
 export HOST_LDFLAGS=" "
 }}}
 I'll test that on one of my machines. As I said the problem is not
 existing in Fx 29 anymore with my current setup. So, I am bisecting on my
 other machine meanwhile to find something useful (I guess this is less
 time-consuming than examining stack traces of an already solved problem
 although it is quite tempting to take that road).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online