Port the ASan reporter add-on from Firefox, to make fuzzing Thunderbird and reporting security vulnerabilities easier. This was added to Firefox in Bug 1386304. Also see:

• https://blog.mozilla.org/security/2018/07/19/introducing-the-asan-nightly-project/
• https://firefox-source-docs.mozilla.org/tools/sanitizer/asan_nightly.html

This was first requested in Bug 1641581.

The reporter code is built into Firefox now. Bug 1487173. The biggest obstacle to including it is probably going to be the "crashproxy" piece which is a server at https://anf1.fuzzing.mozilla.org/crashproxy/submit/.

This bug is actionable now!

Per Chris Holler, Thunderbird can submit results to the Firefox crashproxy. Due to limitations in the infrastructure, Thunderbird devs won't have direct access to the results, but the necessary information will be filed in Bugzilla for issues that can be fixed.

The current ASan builds need to be converted to "shippable" builds, the reporter code needs enabling, and a Balrog channel(?) set up (in bug 1716977).

Does it make sense to move AsanReporter.jsm to /toolkit/modules to avoid copying it to comm/mail/modules?

(In reply to Rob Lemley [:rjl] from comment #3)

Does it make sense to move AsanReporter.jsm to /toolkit/modules to avoid copying it to comm/mail/modules?

If you can make the same module work for Firefox and TB, then I think that's a good way to move forward, yes :)

See https://firefox-source-docs.mozilla.org/tools/sanitizer/asan_nightly.html.

Depends on bug 1764092 for mozilla-central support.

Depends on D143515

Pushed by thunderbird@calypsoblue.org:
https://hg.mozilla.org/comm-central/rev/97323aeeed59
Initialize AsanReporter when enabled. r=mkmelin
https://hg.mozilla.org/comm-central/rev/6a84da06fc27
Thunderbird AsanReporter build config. r=#thunderbird-reviewers,mkmelin

Pushed by thunderbird@calypsoblue.org:
https://hg.mozilla.org/comm-central/rev/d6b0477f76c2
Follow-up: Set correct project when building asan-reporter for Win. r=aleca

Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/9f307f88fb90
Follow-up: Do not upload symbols for asan-reporter builds. r=mkmelin

Backout: https://hg.mozilla.org/comm-central/rev/011c5679fadd988db71a9ca043dbe34ba23cb006

https://treeherder.mozilla.org/jobs?repo=comm-central&selectedTaskRun=Iyh1XNrISk2v8PvXcRJHvg.0&revision=ed5dc30ac9653aec86ae735bbec516a2d7e431a9

Exception: Shippable job build-linux64-asan-reporter-shippable/opt should have enable-full-crashsymbols attribute set to true to enable symbol upload to crash-stats

Pushed by alessandro@thunderbird.net:
https://hg.mozilla.org/comm-central/rev/27ec2ba4d087
Follow-up: Do not upload symbols for asan-reporter builds. r=mkmelin