[tor-bugs] #22486 [Core Tor/Tor]: Build Tor with clang's -fsanitize=pointer-overflow

[Tor Bug Tracker & Wiki]

#22486: Build Tor with clang's -fsanitize=pointer-overflow
----------------------------+------------------------------------
 Reporter:  teor            |          Owner:
     Type:  defect          |         Status:  new
 Priority:  Medium          |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor    |        Version:
 Severity:  Normal          |     Resolution:
 Keywords:  pointer-safety  |  Actual Points:
Parent ID:                  |         Points:  1
 Reviewer:                  |        Sponsor:
----------------------------+------------------------------------

Comment (by teor):

 Replying to [comment:1 nickm]:
 > That link says:
 > > these checks are now part of UBSan and -fsanitize=undefined will
 enable them
 >
 > So i think we may not need to take any action to have this included in
 our fragile hardening mode?

 You're right, the sanitizer improvements just seem to work, see #22490,
 which is a use-after-stack-free bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22486#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online