[tor-bugs] #5178 [Tor]: Adaptive circuit-build timeout code does not match spec

[Tor Bug Tracker & Wiki]

#5178: Adaptive circuit-build timeout code does not match spec
---------------------------------+------------------------------------------
 Reporter:  rransom              |          Owner:  mikeperry         
     Type:  defect               |         Status:  needs_review      
 Priority:  major                |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor                  |        Version:                    
 Keywords:  tor-client tor-spec  |         Parent:                    
   Points:                       |   Actualpoints:                    
---------------------------------+------------------------------------------
Changes (by mikeperry):

  * status:  assigned => needs_review


Comment:

 Ok, I fixed the spec in my torspec remote branch mikeperry/bug5178.

 I am not sure what the attack vector is for the evil bridge is from
 comment 1.

 I also did not alter the constants from comment 1 in the tor source. As I
 see it, this provides a way for us to prevent clearing timeout data from
 the consensus, but does not introduce a bug. File a new bug for that (and
 attach a patch) if you're still concerned.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5178#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online