[tor-bugs] #8727 [Tor]: ServerTransportListenAddr validation could be better

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 18 14:56:51 UTC 2013


#8727: ServerTransportListenAddr validation could be better
---------------------------+------------------------------------------------
 Reporter:  asn            |          Owner:                    
     Type:  defect         |         Status:  new               
 Priority:  normal         |      Milestone:  Tor: 0.2.5.x-final
Component:  Tor            |        Version:                    
 Keywords:  tor-bridge pt  |         Parent:                    
   Points:                 |   Actualpoints:                    
---------------------------+------------------------------------------------
 Someone put in his torrc:
 {{{
 ServerTransportListenAddr obfs2,obfs3 0.0.0.0:56831 0.0.0.0:56832
 }}}
 inspired by the format of ServerTransportPlugin. Unfortunately, this is
 not the correct way to use ServerTransportListenAddr. The correct way is:

 {{{
 ServerTransportListenAddr obfs2 0.0.0.0:56831
 ServerTransportListenAddr obfs3 0.0.0.0:56832
 }}}

 We should at least validate that the first argument of the line is a
 pluggable transport name (C-identifier) to avoid stuff like "obfs2,obfs3".

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8727>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list