Open Bug 1468382 Opened 6 years ago Updated 3 months ago

Remove -fsanitize-cfi-icall-generalize-pointers

Categories

(Core :: Security, defect)

Product:
Core
Component:
Security
Type:
defect

Tracking

()

People

(Reporter: tjr, Unassigned)

References

(Blocks 1 open bug)

Details

Initially, I'm throwing this flag across the entire codebase. That's far from ideal, it weakens CFI icall by making it much more coarse.  

Ideally:
 - All mozilla code is fixed to not need it
 - It is applied to either individual third party libraries or (preferably) individual source code files in them

Is this bug still active?

At the moment, we are not working on CFI; so this flag is not in the codebase. If/When we do deploy CFI, we will likely initially land it with this flag and then work to remove it.

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.