Opened 4 years ago

Closed 3 years ago

#18310 closed defect (wontfix)

Build TBBs Tor with -ftrapv

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The TBB build process for Tor should build Tor with -ftrapv.

Related tickets:
https://trac.torproject.org/projects/tor/ticket/18296
https://trac.torproject.org/projects/tor/ticket/17983

Child Tickets

Change History (2)

comment:1 Changed 3 years ago by teor

We built tor with -ftrapv by default early in the 0.2.9 series, then backed this out as a denial of service risk (#21290).

I would strongly recommend we *don't* build Tor Browser's tor with -ftrapv by default.

More information:
https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening

Discussion on tbb-dev about the tbb "hardened" series:
https://lists.torproject.org/pipermail/tbb-dev/2017-February/000457.html

comment:2 in reply to:  1 Changed 3 years ago by gk

Resolution: wontfix
Status: newclosed

Replying to teor:

We built tor with -ftrapv by default early in the 0.2.9 series, then backed this out as a denial of service risk (#21290).

I would strongly recommend we *don't* build Tor Browser's tor with -ftrapv by default.

Agreed.

Note: See TracTickets for help on using tickets.