[tor-bugs] #17027 [Tor]: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local addresses

[Tor Bug Tracker & Wiki]

#17027: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local
addresses
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:
     Type:  defect                               |         Status:
 Priority:  High                                 |  needs_review
Component:  Tor                                  |      Milestone:  Tor:
 Severity:  Normal                               |  0.2.6.x-final
 Keywords:  TorCoreTeam201511, security,         |        Version:  Tor:
  026-backport, 027-backport                     |  unspecified
Parent ID:                                       |     Resolution:
  Sponsor:                                       |  Actual Points:
                                                 |         Points:
-------------------------------------------------+-------------------------
Changes (by teor):

 * keywords:  TorCoreTeam201512, security, 026-backport, 027-backport =>
     TorCoreTeam201511, security, 026-backport, 027-backport
 * status:  needs_revision => needs_review


Comment:

 Please see my commit bug17027-reject-private-027-v4 on
 https://github.com/teor2345/tor.git

 It's based on tor 0.2.7.4-rc, and appears to merge cleanly into 0.2.8 /
 master.

 ExitPolicyRejectPrivate now blocks configured outbound bind addresses and
 port addresses (such as ORPort and DirPort).

 I'll create another bug for the backport to 0.2.6. (It's in bug17027
 -reject-private-026-v4.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17027#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online