[tor-bugs] #12427 [Tor bundles/installation]: Investigate Virtual Table Verification (VTV) hardening for Tor Browser on Windows

[Tor Bug Tracker & Wiki]

#12427: Investigate Virtual Table Verification (VTV) hardening for Tor Browser on
Windows
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  erinn
         Type:  task                 |     Status:  new
     Priority:  normal               |  Milestone:
    Component:  Tor                  |    Version:
  bundles/installation               |   Keywords:  tbb-security,
   Resolution:                       |  TorbrowserTeam201407
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by gk):

 Current state of the art (comment:37:ticket:10599):
 "
 I uploaded a working build with ASan, UBSan and VTV to
 ​https://people.torproject.org/~gk/testbuilds/asan/20140620/.

 They are currently compiled with "-fvtable-verify=std". "-fvtable-
 verify=preinit" does not work with ld but using gold seems to be fine.
 I'll add that piece in the next iteration of these builds. In order to
 avoid the browser exiting on VTV errors the compiler is built with
 -DVTV_NO_ABORT.
 "

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12427#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online