[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #12420 [Tor bundles/installation]: Investigate deploying STACK to check for optimization-unstable code
#12420: Investigate deploying STACK to check for optimization-unstable code
--------------------------------------+-----------------------
Reporter: gk | Owner: erinn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor bundles/installation | Version:
Keywords: tbb-security | Actual Points:
Parent ID: | Points:
--------------------------------------+-----------------------
Optimization-unstable code (code that is unexpectedly eliminated by
compiler optimizations due to undefined behavior in the program) can lead
to serious bugs in programs. We should think about deploying STACK, which
helps to detect this class of bugs, when building our hardened bundles at
least. Relevant reading material:
http://kqueue.org/blog/2013/09/17/cltq/
http://css.csail.mit.edu/stack/
http://pdos.csail.mit.edu/papers/stack:sosp13.pdf
http://pdos.csail.mit.edu/papers/ub:apsys12.pdf
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12420>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs