Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#21656 closed defect (duplicate)

Add "low cost" hardening build flags to OS X

Reported by: arthuredelstein Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-security
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I would propose including the following flags in our OS X clang build:

-Werror=format
-Werror=format-security
-fstack-protector-strong
-pie
-fPIE (already there)
-D_FORTIFY_SOURCE=2 -O1
-Wl,-z,relro,-z,now

Child Tickets

Change History (3)

comment:1 Changed 2 years ago by arthuredelstein

Keywords: tbb-security added

comment:2 Changed 2 years ago by arthuredelstein

Resolution: duplicate
Status: newclosed

Duplicate of #23025

comment:3 Changed 2 years ago by arthuredelstein

Parent ID: #21448
Note: See TracTickets for help on using tickets.