[tor-bugs] #10281 [Applications/Tor Browser]: Investigate usage of alternate memory allocators and memory hardening options

[Tor Bug Tracker & Wiki]

#10281: Investigate usage of alternate memory allocators and memory hardening
options
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  enhancement                          |         Status:
                                                 |  needs_review
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, tbb-hardened,          |  Actual Points:
  TorBrowserTeam201612R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  SponsorU
-------------------------------------------------+-------------------------

Comment (by arthuredelstein):

 Replying to [comment:44 mcs]:
 > I did not look at the backported patches; do I need to? They are large;
 I guess if they merged cleanly they are probably okay.

 I think those are OK -- they're just pulling in the update patches from
 jemalloc.

 > Enabling the redzones and abort options might make TB slower and less
 stable. But I guess finding lurking bugs is a good thing as long as
 performance is not reduced too much.

 Both these comments are true. Seems like the alphas is the right place
 until we observe performance and how crashy the browser is. One thing I
 can try in the near future is to push this patch to Mozilla's try server
 and look at crashes and talos (performance) results.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10281#comment:45>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online