[tor-bugs] #8976 [Tor]: rend_service_introduce() doesn't notice if the rendezvous point is on 127.0.0.1

Mon May 27 05:58:03 UTC 2013

#8976: rend_service_introduce() doesn't notice if the rendezvous point is on
127.0.0.1
--------------------+-------------------------------------------------------
 Reporter:  arma    |          Owner:                    
     Type:  defect  |         Status:  new               
 Priority:  normal  |      Milestone:  Tor: 0.2.5.x-final
Component:  Tor     |        Version:                    
 Keywords:  tor-hs  |         Parent:                    
   Points:          |   Actualpoints:                    
--------------------+-------------------------------------------------------
 An anonymous person on irc just pointed out to me that
 rend_service_introduce() has no checks for whether the introduce2 cell
 specifies a private address.

 I've only looked at it cursorily, but I don't think it's the end of the
 world. The relay that is asked to extend to this private address will
 probably have ExtendAllowPrivateAddresses set to 0, and will refuse.

 Perhaps it will cause the hidden service to keep trying to reach the
 rendezvous point (wasting lots of circuits), but that could be induced by
 telling it a public address that doesn't work too.

 Anything else scary? Worth fixing anyway I guess.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8976>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online