[tor-bugs] #14917 [Tor]: Client's choice of rend point can leak info about hidden service's guard relay

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 2 14:40:18 UTC 2015


#14917: Client's choice of rend point can leak info about hidden service's guard
relay
-------------------------+-------------------------------------------------
     Reporter:  arma     |      Owner:  dgoulet
         Type:  defect   |     Status:  needs_review
     Priority:  major    |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor      |    Version:
   Resolution:           |   Keywords:  SponsorR, tor-hs, 027-triaged-1-in,
Actual Points:           |  SponsorU, TorCoreTeam201509 PostFreeze027
       Points:  medium   |  Parent ID:
-------------------------+-------------------------------------------------
Changes (by dgoulet):

 * status:  needs_revision => needs_review


Comment:

 Replying to [comment:19 nickm]:
 > Problem: this will also reject "EntryNodes {de}", I think, since that
 also has routerset_t.list set to a one-element list.  (Let me know if I'm
 wrong)

 Indeed... good catch.

 See fix: `bug14917_027_02`.

 I've used `routerset_is_list()` to make sure we only have either digests
 or nicknames in the set. Works fine in chutney now.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14917#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list