Hi,
David A. Wheeler (2022-09-18):
> Has anyone looked into adding -D_FORTIFY_SOURCE=3 to some
> applications that directly interact with data from the Internet,
> such as t eh , web browser or parts of the Tor implementation?
I did not, thanks for the pointer!
I've just suggested the Tor Browser team to consider it:
https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40625
As for the tor client, and other software that use the Debian build
system, it'll require changes to the Debian toolchain. I've just
sent a bug report against dpkg-dev to suggest it.
Cheers!
