[tbb-dev] What protections are present in the hardened Tor Browser?

[David Fifield]

I wanted to know what exactly is different in the hardened series.

The master..hardened-builds diff has many spurious changes and is not
that clear:
https://gitweb.torproject.org/builders/tor-browser-bundle.git/diff/?id=hardened-builds&id2=master

The best I can tell, the differences are:
 * ASan
 * --enable-expensive-hardening for tor (enables -fsanitize=address,
   -fsanitize=undefined, and -fno-omit-frame-pointer)
 * selfrando