[tor-bugs] #6811 [Tor Relay]: Crash bug in tor_timegm

[Tor Bug Tracker & Wiki]

#6811: Crash bug in tor_timegm
-----------------------+----------------------------------------------------
 Reporter:  nickm      |          Owner:                    
     Type:  defect     |         Status:  new               
 Priority:  critical   |      Milestone:  Tor: 0.2.2.x-final
Component:  Tor Relay  |        Version:                    
 Keywords:             |         Parent:                    
   Points:             |   Actualpoints:                    
-----------------------+----------------------------------------------------
 It looks like the assertion in tor_timegm is triggerable with bad inputs,
 according to asn.  That's no good: we call it on untrusted inputs from
 directory objects.

 Latest version of my preferred fix is in branch "timegm_assert_v2".  It
 needs a little cleanup and a changes file. It might not be minimal.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6811>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online