[tor-bugs] #7191 [Tor]: smartlist_bsearch_idx() is broken for short lists

[Tor Bug Tracker & Wiki]

#7191: smartlist_bsearch_idx() is broken for short lists
--------------------+-------------------------------------------------------
 Reporter:  andrea  |          Owner:  andrea            
     Type:  defect  |         Status:  new               
 Priority:  major   |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor     |        Version:  Tor: 0.2.4.3-alpha
 Keywords:          |         Parent:                    
   Points:          |   Actualpoints:                    
--------------------+-------------------------------------------------------
Changes (by nickm):

  * milestone:  Tor: 0.2.4.x-final => Tor: 0.2.3.x-final


Comment:

 Replying to [comment:1 andrea]:
 > Filing this ticket after discussing with nickm and concluding it isn't
 exploitable under reasonable conditions.

 Right.  To be clear, you'd need to be an authority to exploit this, and
 you could only exploit it against other authorities.  V2 authorities could
 exploit it against anybody cacheing v2 directory info.

 I do claim this might be worth backporting to 0.2.3, but would like arma
 and andrea's feedback there.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7191#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online