[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 Quoting Christian Holler from
 https://bugzilla.mozilla.org/show_bug.cgi?id=1013341:
 {{{
 Especially for testing I can highly recommend Clang. ASan isn't the only
 thing
 available there, you also get TSan, UBSan, LSan and some other checkers
 that
 GCC lacks. Not all of these are usable on Firefox, since our codebase has
 quite
 a few races and undefined behavior, but smaller programs can be tested
 quite
 well.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online