[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by gk):

 Now the work with Precise: Tor Browser builds fine there with GCC 4.9.0
 and ASan, UBSan and VTV. The other fancy option mentioned on
 https://developer.mozilla.org/en-US/docs/Building_SpiderMonkey_with_UBSan
 are not supported in 4.9.0 but some of them landed already on GCC trunk.
 Anyway, the build crashes on start-up with the attached log. I have not
 had time to look into that yet. So my short term plan is getting hardened
 bundles built on Lucid out with ASan and UBSan while debugging the VTV
 issue and the one in comment:16. If someone is interested to debug the VTV
 issue let me know and I'll upload the bundle + debug symbols (ca. 500MiB).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online