[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #16417 [Tor Browser]: DEP/ASLR missing on some Tor Browser (Pluggable Transports) binaries on Windows

#16417: DEP/ASLR missing on some Tor Browser (Pluggable Transports) binaries on
Windows
-----------------------------+--------------------------
     Reporter:  boklm        |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-security
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------

Comment (by yawning):

 Anything that's Go based won't ever have either, because the upstream Go
 maintainers place way too much faith in their compiler and runtime to
 allow for such things.  I think this is shortsighted and stupid (Golang
 binaries are also statically linked so ASLR seems somewhat less useful).

 FTE/flashproxy are the only reasons why we still even bundle
 python/obfsproxy, we can probably remove obfsproxy.exe from the build
 process at this point as long fteproxy.exe still gets built correctly (or
 deprecate FTE).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16417#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs