[tor-bugs] #15901 [Tor]: apparent memory corruption from control channel request processing -- very difficult to isolate

[Tor Bug Tracker & Wiki]

#15901: apparent memory corruption from control channel request processing -- very
difficult to isolate
---------------------------+---------------------------
     Reporter:  starlight  |      Owner:
         Type:  defect     |     Status:  new
     Priority:  normal     |  Milestone:
    Component:  Tor        |    Version:  Tor: 0.2.5.12
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+---------------------------

Comment (by starlight):

 Went back looking at the cached-* files.

 Turns out I zapped them right after the last
 event.  Stands out that the old
 `cached-microdescs` is ~450kb where the where
 the rebuilt one is ~720kb.  The modify date on
 this file tends to be older than the others.
 Perhaps this affects the layout of the
 heap in such a way that the bug is more
 likely to impact consensus data and result
 in obvious failure.

 Put back the old files and restarted with the
 configuration known to fail.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15901#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online