bug17983 660 B

1234567891011
  1. o Major features (build, hardening):
  2. - Tor now builds with -ftrapv by default on compilers that support it.
  3. This option detects signed integer overflow, and turns it into a
  4. hard-failure. We do not apply this option to code that needs to run
  5. in constant time to avoid side-channels; instead, we use -fwrapv.
  6. Closes ticket 17983.
  7. - When --enable-expensive-hardening is selected, stop applying the clang/gcc
  8. sanitizers to code that needs to run in constant-time to avoid side
  9. channels: although we are aware of no introduced side-channels, we
  10. are not able to prove that this is safe. Related to ticket 17983.