mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Nick Mathewson
27e870cede
(Also remove changes/bug19530 since it was a bugfix on no released version)
12 lines
660 B
Plaintext
12 lines
660 B
Plaintext
o Major features (build, hardening):
|
|
- Tor now builds with -ftrapv by default on compilers that support it.
|
|
This option detects signed integer overflow, and turns it into a
|
|
hard-failure. We do not apply this option to code that needs to run
|
|
in constant time to avoid side-channels; instead, we use -fwrapv.
|
|
Closes ticket 17983.
|
|
- When --enable-expensive-hardening is selected, stop applying the clang/gcc
|
|
sanitizers to code that needs to run in constant-time to avoid side
|
|
channels: although we are aware of no introduced side-channels, we
|
|
are not able to prove that this is safe. Related to ticket 17983.
|
|
|