Changes between Version 3 and Version 4 of Ticket #5837


Ignore:
Timestamp:
May 12, 2012, 8:20:55 AM (7 years ago)
Author:
mikeperry
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #5837 – Description

    v3 v4  
    10101. Download a signed TBB release from https://www.torproject.org/dist/torbrowser/.
    1111
    12 2. Compile your own TBB bundle. This is somewhat tricky and may require its own instructions which Sebastian is working on writing for Windows and Linux, and already exist in https://gitweb.torproject.org/torbrowser.git/tree/master:/docs/buildmachine_setups for Mac OS.
     122. Compile your own TBB bundle. This is somewhat tricky. Sebastian has instructions for Mac OS in https://gitweb.torproject.org/torbrowser.git/tree/master:/docs/buildmachine_setups. Windows and Linux instructions should arrive there soon.
    1313
    14143. BinDiff the resulting packaging exe as well as the exes contained therein.
    1515
    16 If you lack BinDiff, you should consider focusing your efforts on MacOS and Linux packages, which should be substantially more similar than Windows, especially if you build on Debian/Lenny or MacOS 10.7 with Xcode 4. Start with using the 'cmp' (or hexdump and diff) Unix commands to find the differing sections of the binaries, and then use IDA Pro to inspect those sections.
     16If you lack BinDiff, you should consider focusing your efforts on MacOS and Linux packages, which should produce substantially more similar builds than Windows, especially if you build the Linux TBB on Debian Lenny and the Mac one on MacOS 10.7 with Xcode 4 (which are our build machine setups). Start with using the 'cmp' (and/or hexdump and diff) UNIX commands to find the differing sections of the binaries, and then use IDA Pro to inspect those sections. More advanced tools to find minimal binary edit differences may also be useful if the differences the basic tools find are large. http://jojodiff.sourceforge.net/ is an example of one such tool, but there probably are others.
    1717
    1818You should be able to use IDA Pro for any platform to analyze binaries for any other platform. You do not need to buy the MacOS copy to analyze MacOS binaries.
    1919
    20 4. Text diff the non-exe components (for example, conf files, shell scripts, contents of Firefox jars and addon sources).
     204. Use normal UNIX diff on the non-exe components (for example, conf files, shell scripts, contents of Firefox jars and addon sources).
    2121
    22225. Write up the significant differences.