[tor-bugs] #8976 [Tor]: rend_service_introduce() doesn't notice if the rendezvous point is on 127.0.0.1

[Tor Bug Tracker & Wiki]

#8976: rend_service_introduce() doesn't notice if the rendezvous point is on
127.0.0.1
----------------------+------------------------------------
 Reporter:  arma      |          Owner:
     Type:  defect    |         Status:  new
 Priority:  Medium    |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor       |        Version:
 Severity:  Normal    |     Resolution:
 Keywords:  tor-hs    |  Actual Points:
Parent ID:  #17674    |         Points:
  Sponsor:  SponsorR  |
----------------------+------------------------------------
Changes (by teor):

 * sponsor:   => SponsorR


Comment:

 This is fixed by the patch in #17674:

 ExtendAllowPrivateAddresses only prevents Tor clients and hidden services
 from sending extend cells with private addresses.

 Relays (and now RSOS) will still connect to a private address if they
 receive an extend cell or a rendezvous request from a badly behaved
 client. They might not send an extend request, but they do still connect.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8976#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online