[tor-bugs] #2317 [Tor Client]: Missing sanity checks for cbtnummodes consensus parameter

[Tor Bug Tracker & Wiki]

#2317: Missing sanity checks for cbtnummodes consensus parameter
------------------------+---------------------------------------------------
 Reporter:  Sebastian   |       Owner:     
     Type:  defect      |      Status:  new
 Priority:  normal      |   Milestone:     
Component:  Tor Client  |     Version:     
 Keywords:              |      Parent:     
------------------------+---------------------------------------------------

Comment(by Sebastian):

 Here we go with some more love from doors:

 {{{
 <doors> last version was backdoored. If you can't fix it don't use it.

 <doors> you don't do any sanity checks on the value of the consensus
 parameterS.


 <doors> "if (x <= a) then check if (x >= a) then CRASH"  is backdoor
 masked as 3.y.o. kid's mistake.
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2317#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online