[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 Replying to [comment:22 gk]:
 > Replying to [comment:21 mikeperry]:
 > > Thoughts? I suppose an alternate way to achieve #1 might be to build a
 4.8 gcc in lucid and then use that gcc to build 4.9. Not sure which would
 mean more build time/hassle on average.
 >
 > I slightly prefer that approach to #1 if we don't find a better
 solution. It needs *once* more build time as we save the built utils (but
 this build time overhead can be quite a lot as we need to compile both
 gccs with -j1 due to autotools not liking libfaketime). Anyway, I've filed
 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61314 and maybe the gcc folks
 are coming up with an easy fix/workaround for us.

 Hmm... looking at the log again I just recognized that we are failing in
 the "make install" step. The failure probably happens due to libfaketime
 issues although I still don't see why re-compiling parts of libbacktrace
 in this step should lead to the error I encounter. Note that I compiled
 gcc 4.9.0 on precise just for testing purposes. We might actually run into
 the very same issue once we switch to it under the libfaketime rule. Maybe
 the gcc people have a good idea.

 Another option would be to avoid using libfaketime for building GCC 4.9.0
 (let's suppose that is the real problem here; I have to test that) as we
 are currently not checking whether the utils are built deterministically
 at all.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online