#22267: Windows build of esr52 Tor Browser has no relocs, SSP and DEP/ASLR flags -------------------------------------------------+------------------------- Reporter: boklm | Owner: boklm Type: defect | Status: | needs_review Priority: High | Milestone: Component: Applications/Tor Browser | Version: Severity: Major | Resolution: Keywords: TorBrowserTeam201705R, tbb- | Actual Points: security, ff52-esr, tbb-7.0-must | Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+------------------------- Changes (by cypherpunks):
* severity: Normal => Major Comment: It has DEP, because you are using SetProcessDEPPolicy(), but it can't even be forced into ASLR without the .reloc section. (Checking real availability of mitigations, and not only flags, would be neat.) -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22267#comment:4> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs