[tor-bugs] #12968 [Applications/Tor Browser]: Specify HEASLR (High Entropy Address Space Layout Randomization) in MinGW-w64

[Tor Bug Tracker & Wiki]

#12968: Specify HEASLR (High Entropy Address Space Layout Randomization) in
MinGW-w64
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  needs_revision
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, tbb-rbm, ff60-esr,     |  Actual Points:
  TorBrowserTeam201806, boklm201806              |
Parent ID:  #24631                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by boklm):

 I tried adding `-Wl,--image-base,0x140000000` to the flags. However the
 firefox build fails with errors such as:
 {{{
 Executing: /var/tmp/dist/mingw-w64/helpers/x86_64-w64-mingw32-g++
 -std=gnu++11 -mwindows -shared -Wl,--out-implib -Wl,liblgpllibs.a -o
 lgpllibs.dll module.res -specs=/va
 r/tmp/dist/mingw-w64/msvcr100.spec -Wl,--build-id -static
 ../../../../config/external/lgpllibs/lgpllibs.def /var/tmp/build/firefox-
 f8f42fea2af3/obj-mingw/config/external
 /lgpllibs/tmpcCxggc.list ../../../mozglue/build/libmozglue.a -luuid
 -lgdi32 -lwinmm -lwsock32 -luserenv -lsecur32
 /var/tmp/build/firefox-f8f42fea2af3/obj-
 mingw/config/external/lgpllibs/tmpcCxggc.list:
     INPUT("../../../media/libav/avfft.o")
     INPUT("../../../media/libav/fft_fixed.o")
     INPUT("../../../media/libav/dict.o")
     INPUT("../../../media/libav/opt.o")
     INPUT("../../../media/libav/Unified_c_media_libav0.o")
     INPUT("../../../media/libav/Unified_c_media_libav1.o")
     INPUT("../../../media/libav/fft.o")
     INPUT("../../../media/libav/cpuid.o")
     INPUT("../../../media/libav/libavutil/x86/cpu.o")
     INPUT("../../../media/libsoundtouch/src/sse_optimized.o")
 INPUT("../../../media/libsoundtouch/src/Unified_cpp_libsoundtouch_src0.o")
     INPUT("../../../memory/fallible/fallible.o")

 ../../../media/libav/fft.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavcodec/x86/fft.asm:(.debug_info+0x6):
 relocation truncated to fit: R_X86_64_32 against `.d
 ebug_abbrev'
 ../../../media/libav/fft.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavcodec/x86/fft.asm:(.debug_info+0xc):
 relocation truncated to fit: R_X86_64_32 against `.d
 ebug_line'
 ../../../media/libav/fft.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavcodec/x86/fft.asm:(.debug_aranges+0x6):
 relocation truncated to fit: R_X86_64_32 against
 `.debug_info'
 ../../../media/libav/cpuid.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavutil/x86/cpuid.asm:(.debug_info+0x6):
 relocation truncated to fit: R_X86_64_32 against
 `.debug_abbrev'
 ../../../media/libav/cpuid.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavutil/x86/cpuid.asm:(.debug_info+0xc):
 relocation truncated to fit: R_X86_64_32 against
 `.debug_line'
 ../../../media/libav/cpuid.o:/var/tmp/build/firefox-
 f8f42fea2af3/media/libav/libavutil/x86/cpuid.asm:(.debug_aranges+0x6):
 relocation truncated to fit: R_X86_64_32 again
 st `.debug_info'
 collect2: error: ld returned 1 exit status
 /var/tmp/build/firefox-f8f42fea2af3/config/rules.mk:800: recipe for target
 'lgpllibs.dll' failed
 make[5]: *** [lgpllibs.dll] Error 1
 }}}

 It seems the part of the build which fails is not the same every time, but
 with a similar error message. Probably because of the `make -j8`.

 I tried the gcc patch adding `#define _GLIBCXX_USE_WEAK_REF 0`, however it
 does not solve the issue.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12968#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online