[tor-bugs] #12227 [Tor]: ASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitable
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Jun 9 02:40:56 UTC 2014
#12227: ASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitable
---------------------------+-------------------------------------
Reporter: starlight | Owner:
Type: defect | Status: needs_review
Priority: normal | Milestone: Tor: 0.2.5.x-final
Component: Tor | Version: Tor: 0.2.4.22
Resolution: | Keywords: tor-client 024-backport
Actual Points: | Parent ID:
Points: |
---------------------------+-------------------------------------
Comment (by cypherpunks):
get_cipher_by_char for SSLv23 is wrong and shouldn't be used. It messes
bytes and the same bytes shifts differently inside of cipher id.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12227#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list