[tor-bugs] #10281 [Applications/Tor Browser]: Investigate usage of alternate memory allocators and memory hardening options

[Tor Bug Tracker & Wiki]

#10281: Investigate usage of alternate memory allocators and memory hardening
options
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  enhancement                          |         Status:
                                                 |  assigned
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, tbb-hardened,          |  Actual Points:
  TorBrowserTeam201612R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  SponsorU
-------------------------------------------------+-------------------------
Changes (by arthuredelstein):

 * keywords:  tbb-security, tbb-hardened, TorBrowserTeam201612 => tbb-
     security, tbb-hardened, TorBrowserTeam201612R


Comment:

 Here is a patch (please review) that uses jemalloc4 in Tor Browser ESR45
 (Linux). It also activates jemalloc redzones, and aborts if the redzones
 are found to have been corrupted.

 https://github.com/arthuredelstein/tor-browser/commit/10281+2

 (I'm still working on two alternative patches that (1) uses the DieHarder
 memory allocator and (2) uses jemalloc4 with randomized arenas, but I
 think we may want to give the redzone patch a try for now.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10281#comment:36>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online