[tor-bugs] #15138 [Tor Browser]: Investigate TBB 4.5 hardening (e.g. DEP/ASLR) on all Platforms

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Mar 18 23:31:12 UTC 2015


#15138: Investigate TBB 4.5 hardening (e.g. DEP/ASLR) on all Platforms
--------------------------+------------------------------------------------
     Reporter:  tom       |      Owner:  tom
         Type:  defect    |     Status:  new
     Priority:  normal    |  Milestone:
    Component:  Tor       |    Version:
  Browser                 |   Keywords:  TorBrowserTeam201503, tbb-security
   Resolution:            |  Parent ID:
Actual Points:            |
       Points:            |
--------------------------+------------------------------------------------

Comment (by tom):

 On OSX I ran vmmap and confirmed the stack is not executable and I diffed
 the memory locations between different executions (and reboots) on 10.10.
 I confirmed ASLR is enabled and moved everything around for the firefox
 process.  Checking the other features, like stack canaries, will be
 difficult and similar to Windows.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15138#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list