[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: tor: update to

From: Leo Famulari
Subject: Re: tor: update to
Date: Tue, 24 Jan 2017 14:07:26 -0500
User-agent: Mutt/1.7.2 (2016-11-26)

On Tue, Jan 24, 2017 at 11:19:33AM +0000, address@hidden wrote:
> Changes in version - 2017-01-23
>   o Major bugfixes (security):
>     - Downgrade the "-ftrapv" option from "always on" to "only on when
>       --enable-expensive-hardening is provided." This hardening option,
>       like others, can turn survivable bugs into crashes -- and having
>       it on by default made a (relatively harmless) integer overflow bug
>       into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001);
>       bugfix on

I'm not familiar with Tor's build system.

Should we build Tor with "--enable-expensive-hardening"?

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]