[tor-bugs] #4627 [Torctl]: TorCtl doesn't handle quoted passwords

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu Dec 1 16:31:06 UTC 2011

#4627: TorCtl doesn't handle quoted passwords
 Reporter:  atagar   |          Owner:     
     Type:  defect   |         Status:  new
 Priority:  trivial  |      Milestone:     
Component:  Torctl   |        Version:     
 Keywords:  easy     |         Parent:     
   Points:           |   Actualpoints:     
 The TorCtl authenticate_password passes the password directly to the
 control socket without escaping quotes. For more information see...

 Fixing this should be as simple as uncommenting the hex translation or
 secret = secret.replace('"', '\\"')

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4627>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list