Re: [tbb-dev] What protections are present in the hardened Tor Browser?

David Fifield:

I wanted to know what exactly is different in the hardened series.

The master..hardened-builds diff has many spurious changes and is not that clear: https://gitweb.torproject.org/builders/tor-browser-bundle.git/diff/?id=harde...

The best I can tell, the differences are:

• ASan
• --enable-expensive-hardening for tor (enables -fsanitize=address, -fsanitize=undefined, and -fno-omit-frame-pointer)
• selfrando

This is correct. Additionally, we compile the browser part with -fwrapv. Note, selfrando is not in the alpha series available yet only in nightly builds. This will change with the next release, though.

Georg _______________________________________________

tbb-dev mailing list tbb-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev