[tor-bugs] #17406 [Applications/Tor Browser]: Include SelfRando patches into our hardened builds

[Tor Bug Tracker & Wiki]

#17406: Include SelfRando patches into our hardened builds
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  enhancement                          |         Status:
 Priority:  Medium                               |  needs_revision
Component:  Applications/Tor Browser             |      Milestone:
 Severity:  Normal                               |        Version:
 Keywords:  tbb-security, GeorgKoppen201605,     |     Resolution:
  tbb-hardened, TorBrowserTeam201605R            |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by boklm):

 My build failed with a `Cannot allocate memory` error:
 {{{
 + /home/debian/install/binutils/bin/ld.gold --section-start .dynsym=0x800
 -dn /home/debian/install/self-rando/randoentry.o /home/debian/install
 /self-rando/sr_begin.o /home/debian/install/self-rando/libselfrando.a
 /home/debian/install/self-rando/sr_end.o -dy -plugin
 /home/debian/install/gcc/libexec/gcc/x86_64-unknown-linux-
 gnu/5.2.0/liblto_plugin.so -plugin-
 opt=/home/debian/install/gcc/libexec/gcc/x86_64-unknown-linux-gnu/5.2.0
 /lto-wrapper -plugin-opt=-fresolution=/tmp/ccpIArYG.res -plugin-opt=-pass-
 through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-
 through=-lgcc_s --eh-frame-hdr -m elf_x86_64 -shared -o libxul.so
 /usr/lib/x86_64-linux-gnu/crti.o /home/debian/install/gcc/lib/gcc/x86_64
 -unknown-linux-gnu/5.2.0/crtbeginS.o
 -L/home/debian/build/selfrando/Tools/TorBrowser/tc-wrapper
 -L/home/debian/install/gcc/lib/gcc/x86_64-unknown-linux-gnu/5.2.0
 -L/home/debian/install/gcc/lib/gcc/x86_64-unknown-linux-
 gnu/5.2.0/../../../../lib64 -L/lib/x86_64-linux-gnu -L/lib/../lib64
 -L/usr/lib/x86_64-linux-gnu -L/home/debian/install/gcc/lib/gcc/x86_64
 -unknown-linux-gnu/5.2.0/../../.. -lasan -h libxul.so /home/debian/build
 /tor-browser/obj-x86_64-unknown-linux-gnu/toolkit/library/tmpDCjBHo.list
 -lpthread -ldl -z noexecstack -z text --build-id -Bsymbolic -version-
 script symverscript -rpath-link /home/debian/build/tor-browser/obj-x86_64
 -unknown-linux-gnu/dist/bin -rpath-link NONE/lib
 ../../intl/icu/target/lib/libicui18n.a
 ../../intl/icu/target/lib/libicuuc.a
 ../../intl/icu/target/lib/libicudata.a
 ../../security/nss/lib/crmf/libcrmf.a ../../js/src/libjs_static.a
 ../../security/nss/lib/nss/libnss3.so
 ../../security/nss/lib/smime/libsmime3.so
 ../../security/nss/lib/ssl/libssl3.so
 ../../security/nss/lib/util/libnssutil3.so
 ../../config/external/sqlite/libmozsqlite3.so
 ../../nsprpub/lib/ds/libplds4.so ../../nsprpub/lib/libc/src/libplc4.so
 ../../nsprpub/pr/src/libnspr4.so
 ../../config/external/lgpllibs/liblgpllibs.so -ldl -lfreetype -lfontconfig
 -lrt -lXrender -lasound -ldbus-glib-1 -ldbus-1 -lgobject-2.0 -lglib-2.0
 -lgtk-x11-2.0 -latk-1.0 -lgio-2.0 -lpangoft2-1.0 -lgdk-x11-2.0
 -lpangocairo-1.0 -lgdk_pixbuf-2.0 -lpango-1.0 -lcairo -lX11 -lXext -lXt
 -lgthread-2.0 -lstdc++ -lm -lgcc_s -lc -lgcc_s
 /home/debian/install/gcc/lib/gcc/x86_64-unknown-linux-gnu/5.2.0/crtendS.o
 /usr/lib/x86_64-linux-gnu/crtn.o --build-id=none -Map libxul.so.map
 ./padding.AF50QyuurRhLB4T.o
 + /home/debian/install/self-rando/SymProc libxul.so libxul.so.map
 -ffunction-sections
 Can't start ar: Cannot allocate memory
 Can't extract file /usr/lib/x86_64-linux-
 gnu/libpthread_nonshared.a(pthread_atfork.oS) tmpfile:
 /tmp/archived_file_Bm5hxW.o
 collect2: error: ld returned 15 exit status
 make[5]: *** [libxul.so] Error 1
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17406#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online