November 2020 - tor-commits - lists.torproject.org

[tor/release-0.4.4] Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 52e439c13eac6982a605c698c49629b1da48563d Merge: dd63b97288 afb6ff1739 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:24 2020 -0500 Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/release-0.4.4] Merge branch 'maint-0.4.4' into release-0.4.4
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 62ca07b1fd8d9e3dacf6d82610e6318f4705a820 Merge: adf81fb757 ec0f000445 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:17:50 2020 -0500 Merge branch 'maint-0.4.4' into release-0.4.4 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/release-0.4.4] Validate ed25519 keys and canonicity from circuit_n_conn_done()
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit afb6ff17390cb13780c6e813ad0535048dbd9d3c Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 6 11:47:01 2020 -0400 Validate ed25519 keys and canonicity from circuit_n_conn_done() Fixes bug 40080. Bugfix on 0.2.7.2-alpha. --- changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-) diff --git a/changes/bug40080 b/changes/bug40080 new file mode 100644 index 0000000000..8162466354 --- /dev/null +++ b/changes/bug40080 @@ -0,0 +1,6 @@ + o Minor bugfixes (security): + - When completing a channel, relays now check more thoroughly to make + sure that it matches any pending circuits before attaching those + circuits. Previously, address correctness and Ed25519 identities were not + checked in this case, but only when extending circuits on an existing + channel. Fixes bug 40080; bugfix on 0.2.7.2-alpha. diff --git a/src/core/or/channel.c b/src/core/or/channel.c index 3886906875..3bef6218ef 100644 --- a/src/core/or/channel.c +++ b/src/core/or/channel.c @@ -663,7 +663,7 @@ channel_find_by_global_id(uint64_t global_identifier) /** Return true iff chan matches rsa_id_digest and ed_id. * as its identity keys. If either is NULL, do not check for a match. */ -static int +int channel_remote_identity_matches(const channel_t *chan, const char *rsa_id_digest, const ed25519_public_key_t *ed_id) diff --git a/src/core/or/channel.h b/src/core/or/channel.h index 97aa000337..4c0c9aeb4c 100644 --- a/src/core/or/channel.h +++ b/src/core/or/channel.h @@ -741,6 +741,9 @@ int channel_is_outgoing(channel_t *chan); void channel_mark_client(channel_t *chan); void channel_clear_client(channel_t *chan); int channel_matches_extend_info(channel_t *chan, extend_info_t *extend_info); +int channel_remote_identity_matches(const channel_t *chan, + const char *rsa_id_digest, + const ed25519_public_key_t *ed_id); int channel_matches_target_addr_for_extend(channel_t *chan, const tor_addr_t *target); unsigned int channel_num_circuits(channel_t *chan); diff --git a/src/core/or/circuitbuild.c b/src/core/or/circuitbuild.c index f3a5791d6c..67b47b38f1 100644 --- a/src/core/or/circuitbuild.c +++ b/src/core/or/circuitbuild.c @@ -623,21 +623,37 @@ circuit_n_chan_done(channel_t *chan, int status, int close_origin_circuits) circ->state != CIRCUIT_STATE_CHAN_WAIT) continue; - if (tor_digest_is_zero(circ->n_hop->identity_digest)) { + const char *rsa_ident = NULL; + const ed25519_public_key_t *ed_ident = NULL; + if (! tor_digest_is_zero(circ->n_hop->identity_digest)) { + rsa_ident = circ->n_hop->identity_digest; + } + if (! ed25519_public_key_is_zero(&circ->n_hop->ed_identity)) { + ed_ident = &circ->n_hop->ed_identity; + } + + if (rsa_ident == NULL && ed_ident == NULL) { /* Look at addr/port. This is an unkeyed connection. */ if (!channel_matches_extend_info(chan, circ->n_hop)) continue; } else { - /* We expected a key. See if it's the right one. */ - if (tor_memneq(chan->identity_digest, - circ->n_hop->identity_digest, DIGEST_LEN)) + /* We expected a key or keys. See if they matched. */ + if (!channel_remote_identity_matches(chan, rsa_ident, ed_ident)) continue; + + /* If the channel is canonical, great. If not, it needs to match + * the requested address exactly. */ + if (! chan->is_canonical && + ! channel_matches_extend_info(chan, circ->n_hop)) { + continue; + } } if (!status) { /* chan failed; close circ */ log_info(LD_CIRC,"Channel failed; closing circ."); circuit_mark_for_close(circ, END_CIRC_REASON_CHANNEL_CLOSED); continue; } + if (close_origin_circuits && CIRCUIT_IS_ORIGIN(circ)) { log_info(LD_CIRC,"Channel deprecated for origin circs; closing circ."); circuit_mark_for_close(circ, END_CIRC_REASON_CHANNEL_CLOSED);

1 0

[tor/release-0.4.4] Merge branch 'maint-0.3.5' into maint-0.4.3
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 0b2c64effd7b4c1238e3b4da34f09d670dafd52d Merge: 4876409c2a 52e439c13e Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:42 2020 -0500 Merge branch 'maint-0.3.5' into maint-0.4.3 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/release-0.4.4] Merge branch 'maint-0.4.3' into maint-0.4.4
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit ec0f000445fdc3fd7809032c763b67880a6391c4 Merge: b0e6ec627c 0b2c64effd Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:17:42 2020 -0500 Merge branch 'maint-0.4.3' into maint-0.4.4 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-) diff --cc src/core/or/channel.h index 82d89471b4,becb0c973a..fa4ce4f703 --- a/src/core/or/channel.h +++ b/src/core/or/channel.h @@@ -735,6 -733,11 +735,9 @@@ int channel_is_outgoing(channel_t *chan void channel_mark_client(channel_t *chan); void channel_clear_client(channel_t *chan); int channel_matches_extend_info(channel_t *chan, extend_info_t *extend_info); + int channel_remote_identity_matches(const channel_t *chan, + const char *rsa_id_digest, + const ed25519_public_key_t *ed_id); -int channel_matches_target_addr_for_extend(channel_t *chan, - const tor_addr_t *target); unsigned int channel_num_circuits(channel_t *chan); MOCK_DECL(void,channel_set_circid_type,(channel_t *chan, crypto_pk_t *identity_rcvd,

1 0

[tor/maint-0.3.5] Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 52e439c13eac6982a605c698c49629b1da48563d Merge: dd63b97288 afb6ff1739 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:24 2020 -0500 Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/maint-0.4.3] Validate ed25519 keys and canonicity from circuit_n_conn_done()
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit afb6ff17390cb13780c6e813ad0535048dbd9d3c Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 6 11:47:01 2020 -0400 Validate ed25519 keys and canonicity from circuit_n_conn_done() Fixes bug 40080. Bugfix on 0.2.7.2-alpha. --- changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-) diff --git a/changes/bug40080 b/changes/bug40080 new file mode 100644 index 0000000000..8162466354 --- /dev/null +++ b/changes/bug40080 @@ -0,0 +1,6 @@ + o Minor bugfixes (security): + - When completing a channel, relays now check more thoroughly to make + sure that it matches any pending circuits before attaching those + circuits. Previously, address correctness and Ed25519 identities were not + checked in this case, but only when extending circuits on an existing + channel. Fixes bug 40080; bugfix on 0.2.7.2-alpha. diff --git a/src/core/or/channel.c b/src/core/or/channel.c index 3886906875..3bef6218ef 100644 --- a/src/core/or/channel.c +++ b/src/core/or/channel.c @@ -663,7 +663,7 @@ channel_find_by_global_id(uint64_t global_identifier) /** Return true iff chan matches rsa_id_digest and ed_id. * as its identity keys. If either is NULL, do not check for a match. */ -static int +int channel_remote_identity_matches(const channel_t *chan, const char *rsa_id_digest, const ed25519_public_key_t *ed_id) diff --git a/src/core/or/channel.h b/src/core/or/channel.h index 97aa000337..4c0c9aeb4c 100644 --- a/src/core/or/channel.h +++ b/src/core/or/channel.h @@ -741,6 +741,9 @@ int channel_is_outgoing(channel_t *chan); void channel_mark_client(channel_t *chan); void channel_clear_client(channel_t *chan); int channel_matches_extend_info(channel_t *chan, extend_info_t *extend_info); +int channel_remote_identity_matches(const channel_t *chan, + const char *rsa_id_digest, + const ed25519_public_key_t *ed_id); int channel_matches_target_addr_for_extend(channel_t *chan, const tor_addr_t *target); unsigned int channel_num_circuits(channel_t *chan); diff --git a/src/core/or/circuitbuild.c b/src/core/or/circuitbuild.c index f3a5791d6c..67b47b38f1 100644 --- a/src/core/or/circuitbuild.c +++ b/src/core/or/circuitbuild.c @@ -623,21 +623,37 @@ circuit_n_chan_done(channel_t *chan, int status, int close_origin_circuits) circ->state != CIRCUIT_STATE_CHAN_WAIT) continue; - if (tor_digest_is_zero(circ->n_hop->identity_digest)) { + const char *rsa_ident = NULL; + const ed25519_public_key_t *ed_ident = NULL; + if (! tor_digest_is_zero(circ->n_hop->identity_digest)) { + rsa_ident = circ->n_hop->identity_digest; + } + if (! ed25519_public_key_is_zero(&circ->n_hop->ed_identity)) { + ed_ident = &circ->n_hop->ed_identity; + } + + if (rsa_ident == NULL && ed_ident == NULL) { /* Look at addr/port. This is an unkeyed connection. */ if (!channel_matches_extend_info(chan, circ->n_hop)) continue; } else { - /* We expected a key. See if it's the right one. */ - if (tor_memneq(chan->identity_digest, - circ->n_hop->identity_digest, DIGEST_LEN)) + /* We expected a key or keys. See if they matched. */ + if (!channel_remote_identity_matches(chan, rsa_ident, ed_ident)) continue; + + /* If the channel is canonical, great. If not, it needs to match + * the requested address exactly. */ + if (! chan->is_canonical && + ! channel_matches_extend_info(chan, circ->n_hop)) { + continue; + } } if (!status) { /* chan failed; close circ */ log_info(LD_CIRC,"Channel failed; closing circ."); circuit_mark_for_close(circ, END_CIRC_REASON_CHANNEL_CLOSED); continue; } + if (close_origin_circuits && CIRCUIT_IS_ORIGIN(circ)) { log_info(LD_CIRC,"Channel deprecated for origin circs; closing circ."); circuit_mark_for_close(circ, END_CIRC_REASON_CHANNEL_CLOSED);

1 0

[tor/maint-0.4.3] Merge branch 'maint-0.3.5' into maint-0.4.3
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 0b2c64effd7b4c1238e3b4da34f09d670dafd52d Merge: 4876409c2a 52e439c13e Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:42 2020 -0500 Merge branch 'maint-0.3.5' into maint-0.4.3 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/maint-0.4.3] Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 52e439c13eac6982a605c698c49629b1da48563d Merge: dd63b97288 afb6ff1739 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:24 2020 -0500 Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0

[tor/maint-0.4.4] Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5
by nickm＠torproject.org 09 Nov '20

09 Nov '20

commit 52e439c13eac6982a605c698c49629b1da48563d Merge: dd63b97288 afb6ff1739 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Nov 9 16:13:24 2020 -0500 Merge remote-tracking branch 'tor-gitlab/mr/189' into maint-0.3.5 changes/bug40080 | 6 ++++++ src/core/or/channel.c | 2 +- src/core/or/channel.h | 3 +++ src/core/or/circuitbuild.c | 24 ++++++++++++++++++++---- 4 files changed, 30 insertions(+), 5 deletions(-)

1 0