[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #23357 [Core Tor/Tor]: Build with non-Cross-DSO CFI
#23357: Build with non-Cross-DSO CFI
----------------------------------------+----------------------------------
Reporter: shawn.webb | Owner: (none)
Type: enhancement | Status: needs_revision
Priority: Medium | Milestone: Tor:
| 0.3.2.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: security, defence-in-depth | Actual Points:
Parent ID: | Points: 1.0
Reviewer: | Sponsor:
----------------------------------------+----------------------------------
Comment (by shawn.webb):
CFLAGS isn't set by that point, so autoconf will complain with an error
that `+=` was used instead of `=`.
I would probably leave this as a separate flag, given this needs both
explicit compiler and linker support. CFI is still under development by
the clang/llvm folks, too.
As an FYI, I've committed this patch to the HardenedBSD ports tree in case
anyone wants to play with it on HardenedBSD 12-CURRENT/amd64. I'm about to
deploy it on my public relay, which also serves as a transparent proxy for
my entire home LAN.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23357#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs