[tor-bugs] #13471 [Tor]: router daemon crashes with openssl built no_ssl3

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Oct 19 18:03:54 UTC 2014


#13471: router daemon crashes with openssl built no_ssl3
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  starlight              |     Status:  new
         Type:  defect   |  Milestone:  Tor: 0.2.6.x-final
     Priority:  major    |    Version:  Tor: 0.2.4.24
    Component:  Tor      |   Keywords:  tor-relay ssl3 poodle 025-backport
   Resolution:           |  024-backport 023-backport
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by starlight):

 Used the official release TAR tor-0.2.4.24.tar.gz
 SHA1SUM b9f33aed3a2a4a6afa952b6595f5c9a611ffb2bd.

 No idea what the GIT tag is, but if it's unclear
 I suggest starting with the TAR and working back
 from there.

 I'm uploading the .patch files used to tweak
 'openssl' and 'tor' for running with Address
 Sanitizer in production as is done here.
 However it looks to me like a straightforward
 NULL pointer dereference and all ASAN is doing
 is providing a decent stack-trace (with the
 assistance of asan_symbolize.py).  Using GCC 4.9.1
 which so far has not given me any trouble.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13471#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list