[tor-bugs] #13352 [Tor Browser]: Firefox 31 nigthly build's main binary lacks PIE

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13352: Firefox 31 nigthly build's main binary lacks PIE
-------------------------+--------------------------
 Reporter:  intrigeri    |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:  ff31-esr     |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 In the linux32 tarball from
 https://people.torproject.org/~gk/testbuilds/esr31-nightly/, I see:

 {{{
 $ hardening-check firefox
 firefox:
  Position Independent Executable: no, normal executable!
  Stack protected: no, not found!
  Fortify Source functions: no, only unprotected functions found!
  Read-only relocations: yes
  Immediate binding: yes
 }}}

 Note that according to hardening-check, the *.so files have PIE (which I
 find weird, I thought it didn't apply to shared libraries).

 This seems to be a regression compared to tor-browser-linux32-3.6.6_en-
 US.tar.xz, where I see:

 {{{
 $ hardening-check firefox
 firefox:
  Position Independent Executable: yes
  Stack protected: yes
  Fortify Source functions: yes (some protected functions found)
  Read-only relocations: yes
  Immediate binding: no, not found!
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13352>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs