[tor-bugs] #15901 [Tor]: apparent memory corruption from control channel request processing -- very difficult to isolate

[Tor Bug Tracker & Wiki]

#15901: apparent memory corruption from control channel request processing -- very
difficult to isolate
---------------------------+---------------------------
     Reporter:  starlight  |      Owner:
         Type:  defect     |     Status:  new
     Priority:  normal     |  Milestone:
    Component:  Tor        |    Version:  Tor: 0.2.5.12
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+---------------------------

Comment (by starlight):

 Attached the event log messages from the
 three incidents to the ticket, but Trac
 did not forward an indication of that
 via email.

 The messages are somewhat redacted.  Can
 provide any of the materials mentioned
 in original form via private communication.

 During some of the tests, logging verbosity
 was elevated to 'info' in the hope it would
 help, but doing so  seems to inhibit memory
 corruption events.

 Appears the issue is exquisitely sensitive to
 code path timing.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15901#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online