[tor-bugs] #17874 [Tor]: ERROR: AddressSanitizer: heap-use-after-free

[Tor Bug Tracker & Wiki]

#17874: ERROR: AddressSanitizer: heap-use-after-free
-------------------------+------------------------------------
 Reporter:  cypherpunks  |          Owner:
     Type:  defect       |         Status:  new
 Priority:  Very High    |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor          |        Version:  Tor: unspecified
 Severity:  Major        |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+------------------------------------

Comment (by cypherpunks):

 0000000000ef3750 <connection_ap_attach_pending>:
 0000000000ef17e0 <connection_ap_rescan_and_attach_pending>:
 0000000000d05960 <circuit_build_needed_circs>:
 00000000005b5980 <run_scheduled_events>:
 000000000059f6a0 <second_elapsed_callback>:
 000000000180cdc0 <periodic_timer_cb>:
 00000000005b44a0 <run_main_loop_once>:
 00000000005a1900 <run_main_loop_until_done>:
 000000000059c470 <do_main_loop>:
 00000000005a73a0 <tor_main>:
 000000000058d2b0 <main>:
 00000000004e21ee <_start>:

 0000000000568ea0 <__interceptor_free>:
 0000000000e4bd90 <connection_free_>:
 0000000000e4a570 <connection_free>:
 00000000005bc5d0 <connection_unlink>:
 00000000005bd850 <conn_close_if_marked>:
 00000000005bbd50 <close_closeable_connections>:
 000000000058f940 <conn_read_callback>:

 0000000000569180 <__interceptor_malloc>:
 00000000013db780 <tor_malloc_>:
 00000000013dbb10 <tor_malloc_zero_>:
 0000000000e472b0 <entry_connection_new>:
 0000000000e48a60 <connection_new>:
 0000000000eb2f30 <connection_handle_listener_read>:
 0000000000e88ab0 <connection_handle_read_impl>:
 0000000000e88870 <connection_handle_read>:
 000000000058f940 <conn_read_callback>:

 gdb indicated "No stack"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17874#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online