Re: [tor-relays] running Tor relay live with AddressSanitizer

2014-06-27 Thread starlight . 2014q2
Finally got around to compiling 'openssl' and 'libevent' with AddressSanitizer. Found and patched one minor bug as a consequence https://trac.torproject.org/projects/tor/ticket/12227 After running for a week the relay lost its guard status due to declining BWAUTH measurements. At the time Comcas

Re: [tor-relays] running Tor relay live with AddressSanitizer

2014-04-29 Thread starlight . 2014q2
>I'm sold on integrating AddressSanitizer into Tor >as a compile-time option. I've got a ticket for >doing so #11477 >(https://trac.torproject.org/projects/tor/ticket/11477). >I've uploaded your patch there, and am looking >into how to better integrate it. If you could >make sure that the code _I

Re: [tor-relays] running Tor relay live with AddressSanitizer

2014-04-15 Thread Nick Mathewson
On Thu, Apr 10, 2014 at 11:53 PM, wrote: > I updated the patch to > > 1) have AS close /proc > > 2) enable core dump files > > One should add > >/proc /chroot_tor/proc none noauto,bind 0 0 > > to /etc/fstab (note the 'noauto'). > Then the 'tor' startup script does a > >mount /chroot_tor/p

Re: [tor-relays] running Tor relay live with AddressSanitizer

2014-04-10 Thread starlight . 2014q2
I updated the patch to 1) have AS close /proc 2) enable core dump files One should add /proc /chroot_tor/proc none noauto,bind 0 0 to /etc/fstab (note the 'noauto'). Then the 'tor' startup script does a mount /chroot_tor/proc ...start tor sleep 10 umount /chroot_tor/proc And

Re: [tor-relays] running Tor relay live with AddressSanitizer

2014-04-08 Thread starlight . 2014q2
Based on my experience today, I'd say this is an excellent idea for any Tor relay operator. Have been running 'tor' on the router since late November with AddressSanitizer and it has crashed exactly ONE time: Today when someone attempted to apply the OpenSSL "Heartbleed" attack against the relay.

Re: [tor-relays] running Tor relay live with AddressSanitizer

2013-10-31 Thread starlight . 2013q4
At 18:14 10/24/2013 -0400, starlight.201...@binnacle.cx wrote: >Has anyone tried running a live relay with >an image built using GCC 4.8 and >-fsanitize=address? Took an initial jab at it by compiling just 'tor' with CFLAGS = -g -O1 -D_FORTIFY_SOURCE=2 -fstack-protector-all -Wstack-protector

[tor-relays] running Tor relay live with AddressSanitizer

2013-10-24 Thread starlight . 2013q4
Has anyone tried running a live relay with an image built using GCC 4.8 and -fsanitize=address? AddressSanitizer documentation says it should be no worse than about x4 on CPU and typically about x2, so it looks reasonable to try. I'm seeing peak CPU of about 7-8% of a 2.2GHz AMD core. I'd probabl