[tor-bugs] #5131 [Obfsproxy]: auditing obfsproxy

[Tor Bug Tracker & Wiki]

#5131: auditing obfsproxy
-------------------------+--------------------------------------------------
 Reporter:  ioerror      |          Owner:  asn
     Type:  enhancement  |         Status:  new
 Priority:  normal       |      Milestone:     
Component:  Obfsproxy    |        Version:     
 Keywords:  security     |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------

Comment(by Sebastian):

 The extra options look fine to me, except I'm not sure on fwrapv. I think
 it should be safe, because we don't expect to work on anything non-two's
 complement, right? but I dunno.

 As an observation, if you compile the branch with anything other than gcc
 I expect you to get a whole slew of warnings for every source file. This
 seems to be on purpose? It might be pretty confusing.

 Also I am not sure about the license stuff. The text says people should
 get a copy of the gpl along with it, but we don't provide one in the repo.
 Maybe we should show this to Wendy, or someone else will know? Jake said
 something about the autoconf exception for gpl, but it seems to me that
 the source as written in autoconf itself is gpl'd, even if the output as
 generated by autoconf is not?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5131#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online