[tor-bugs] #10599 [Tor bundles/installation]: Investigate building TBB with SoftBound or AddressSanitizer

[Tor Bug Tracker & Wiki]

#10599: Investigate building TBB with SoftBound or AddressSanitizer
------------------------------------------+--------------------------------
     Reporter:  mikeperry                 |      Owner:  erinn
         Type:  enhancement               |     Status:  new
     Priority:  major                     |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  gitian, tbb-
Actual Points:                            |  security
       Points:                            |  Parent ID:
------------------------------------------+--------------------------------

Comment (by mikeperry):

 Here's a link describing building the JS engine with UBSan
 (-faddress=undefined): https://developer.mozilla.org/en-
 US/docs/Building_SpiderMonkey_with_UBSan

 It also describes how to get a proper gdb stack trace out of UbSan. There
 may be a similar way to do this with ASAN, to get a better stack trace for
 the packaging crash in comment 11?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10599#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online