[tor-qa] Introducing hardened builds for 64bit Linux

Katya Titov kattitov at yandex.com
Fri Oct 23 20:46:08 UTC 2015


Georg Koppen:
> Hi,
> 
> we are about to start a hardened Tor Browser series and the first
> nightly for it is ready to get tested (on 64bit Linux systems):
> 
> https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly-hardened_ALL.tar.xz
> https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly-hardened_ALL.tar.xz.asc
> 
> Its major features are:
> 
> 1) expensive hardening for tor (ASan, UBSan...)
> 2) ASan for the browser
> 3) the locales we ship/support are included in one bundle allowing to
> choose the locale for Tor Browser on start-up
> 
> We plan to have something like 3) for the regular alpha and stable
> series in the (near) future as well. Thus, testing it and providing
> feedback is extra welcome.

Works well with my standard suite of tests. Does seem a little slow,
though. I can't quantify it, but it "feels" slow. Using external apps
with torsocks seems OK, so it's probably FF and not Tor.

I'm seeing a lot (dozens) of these errors when using --debug:

(firefox:675): GLib-GObject-WARNING
**: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name
'text-remove::system' is invalid for instance '0x61d002479000' of type
'MaiAtkType27'

(firefox:675): GLib-GObject-WARNING
**: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name
'text-insert::system' is invalid for instance '0x61d002479000' of type
'MaiAtkType27'

(firefox:675): GLib-GObject-WARNING
**: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name
'text-remove::system' is invalid for instance '0x61d002f070a0' of type
'MaiAtkType27'

Also seeing occasional:

(firefox:675): GLib-GObject-WARNING
**: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name
'text_selection_changed' is invalid for instance '0x61d002479000' of
type 'MaiAtkType27'

Running on Debian 8.2

-- 
kat


More information about the tor-qa mailing list