[tor-bugs] #20361 [Applications/Tor Browser]: Investigate CFI means for usage in Tor Browser

[Tor Bug Tracker & Wiki]

#20361: Investigate CFI means for usage in Tor Browser
----------------------------------------+--------------------------
 Reporter:  gk                          |          Owner:  tbb-team
     Type:  task                        |         Status:  new
 Priority:  Medium                      |      Milestone:
Component:  Applications/Tor Browser    |        Version:
 Severity:  Normal                      |     Resolution:
 Keywords:  tbb-security, tbb-hardened  |  Actual Points:
Parent ID:                              |         Points:
 Reviewer:                              |        Sponsor:
----------------------------------------+--------------------------
Description changed by gk:

Old description:

> Chrome uses CFI for some parts in its code:
> https://www.chromium.org/developers/testing/control-flow-integrity and
> Mozilla is about to add CFI support to the build system. We should
> investigate whether we can leverage that at least in our hardened-builds
> as well

New description:

 Chrome uses CFI for some parts in its code:
 https://www.chromium.org/developers/testing/control-flow-integrity and
 Mozilla is about to add CFI support to the build system
 (https://bugzilla.mozilla.org/show_bug.cgi?id=1302891). We should
 investigate whether we can leverage that at least in our hardened-builds
 as well

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20361#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online