[tor-bugs] #15901 [Tor]: apparent memory corruption -- very difficult to isolate

[Tor Bug Tracker & Wiki]

#15901: apparent memory corruption -- very difficult to isolate
---------------------------+--------------------------------
     Reporter:  starlight  |      Owner:
         Type:  defect     |     Status:  new
     Priority:  critical   |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor        |    Version:  Tor: 0.2.6.10
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------

Comment (by someone_else):

 mprotect operates on memory pages (4096 bytes). You need to align the
 memory allocation for the consensus document at a page boundary and pad
 the allocation to completely include the last page (round up the
 allocation to a multiple of 4096).

 This may change the memory layout enough so that something else gets hit
 by the bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15901#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online