[tor-bugs] #10599 [Tor Browser]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  gk
  mikeperry              |     Status:  assigned
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  gitian, tbb-security, tbb-gitian,
    Component:  Tor      |  TorBrowserTeam201510, GeorgKoppen201510
  Browser                |  Parent ID:  #17304
   Resolution:           |    Sponsor:  SponsorU
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Some updates here. The quest continues.

 Replying to [comment:49 gk]:
 > This is a fun bug underlying
 https://bugzilla.mozilla.org/show_bug.cgi?id=1147248 as well. We hit it as
 `FORTIFY_SOURCE` makes `memcpy` always inline. I am still trying to
 pinpoint what is causing this (now with the help of tbsaunde).

 I can work around these problems by backporting

 https://hg.mozilla.org/mozilla-central/rev/33e89c9a4172 and
 https://hg.mozilla.org/mozilla-central/rev/5e86358d4ec2

 > Anyway, besides these two issues there is more around the corner:
 > {{{
 > /home/ubuntu/build/tor-browser/intl/icu/source/common/putil.cpp:2188:
 error: undefined reference to 'dlsym'
 > collect2: error: ld returned 1 exit status
 > }}}

 This only happens with GCC 5. It seems to me this is a Mozilla bug which
 is why I filed https://bugzilla.mozilla.org/show_bug.cgi?id=1213698 (I
 intend to write a patch for that one in case this is still open after our
 October deadline).

 But there is more:

 {{{
 /usr/bin/ld.gold.real: error: /path/to/tor-browser/tor-browser/obj-x86_64
 -unknown-linux-gnu/toolkit/library/../../gfx/skia/SkFontHost_FreeType.o:
 requires dynamic R_X86_64_PC32 reloc against 'FT_Get_X11_Font_Format'
 which may overflow at runtime; recompile with -fPIC
 /usr/bin/ld.gold.real: error: read-only segment has dynamic relocations
 /usr/bin/ld.gold.real: error: hidden symbol 'FT_Get_X11_Font_Format' is
 not defined locally
 collect2: error: ld returned 1 exit status
 }}}

 Surprisingly this is happening since Firefox 30. It got fixed in Firefox
 39 and backporting

 https://hg.mozilla.org/mozilla-central/rev/afd840d66e6a

 helps. Now, back to testing this in our Gitian environment. (On the bright
 side, I found an ICE while trying to compile ESR 38 with GCC master.
 Therefore, not everything was in vain so far then... :) )

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:50>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online