[tor-bugs] #17027 [Tor]: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local addresses

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Dec 17 01:13:25 UTC 2015


#17027: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local
addresses
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:
     Type:  defect                               |         Status:
 Priority:  High                                 |  needs_review
Component:  Tor                                  |      Milestone:  Tor:
 Severity:  Normal                               |  0.2.7.x-final
 Keywords:  TorCoreTeam201512, security,         |        Version:  Tor:
  027-backport                                   |  unspecified
Parent ID:                                       |     Resolution:
  Sponsor:                                       |  Actual Points:
                                                 |         Points:
-------------------------------------------------+-------------------------

Comment (by teor):

 No backport, the current code in 0.2.7 covers the common cases already.
 And 0.2.6 is getting pretty old.
 And exit relay operators can fix it themselves by rejecting their own
 address(es) in their exit policy.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17027#comment:38>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list