[tor-bugs] #10599 [Tor Browser]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  gk
     Type:  enhancement                          |         Status:
 Priority:  Very High                            |  needs_review
Component:  Tor Browser                          |      Milestone:
 Severity:  Normal                               |        Version:
 Keywords:  gitian, tbb-security, tbb-gitian,    |     Resolution:
  TorBrowserTeam201510R, GeorgKoppen201510       |  Actual Points:
Parent ID:  #17304                               |         Points:
  Sponsor:  SponsorU                             |
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  assigned => needs_review
 * keywords:
     gitian, tbb-security, tbb-gitian, TorBrowserTeam201510,
     GeorgKoppen201510
     =>
     gitian, tbb-security, tbb-gitian, TorBrowserTeam201510R,
     GeorgKoppen201510


Comment:

 bug_10599 (https://gitweb.torproject.org/user/gk/tor-
 browser.git/log/?h=bug_10599) in my public tor-browser repo has the Tor
 Browser changes for our hardened builds we start with (the related bundle
 changes will be posted to #17305).

 We won't build the browser with UBSan for now as there are still issues to
 get sorted out (I am still investigating the freeze). I'll open a new bug
 devoted to this task.

 The patches are basically backported fixes for various issues found in the
 previous comments + the respective changes in the .mozconfig-asan.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:60>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online