[tor-bugs] #15901 [Tor]: apparent memory corruption -- very difficult to isolate

[Tor Bug Tracker & Wiki]

#15901: apparent memory corruption -- very difficult to isolate
---------------------------+--------------------------------
     Reporter:  starlight  |      Owner:
         Type:  defect     |     Status:  new
     Priority:  critical   |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor        |    Version:  Tor: 0.2.6.10
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------

Comment (by starlight):

 My thought is to run it this way (partial ASAN+UBSAN)
 for about six weeks.  If the bug does not appear
 I'll go back and try both ideas, which is to
 modify the code to write a copy of every pre-zlib
 -inflate consensus downloaded to a unique file and to
 `mprotect(READONLY)` the consensus document memory
 while running uninstrumented.

 If I have time and am inspired between now and six
 weeks, I'll write the debug patches and maybe
 put them up sooner.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15901#comment:33>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online