[tor-bugs] #16069 [Tor]: ipv4 + ipv6 exit : v6 policy is displayed twice, v4 isn't displayed

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 9 15:16:36 UTC 2015


#16069: ipv4 + ipv6 exit : v6 policy is displayed twice, v4 isn't displayed
--------------------------+-----------------------------------------------
     Reporter:  toralf    |      Owner:
         Type:  defect    |     Status:  new
     Priority:  critical  |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor       |    Version:  Tor: 0.2.7
   Resolution:            |   Keywords:  026-backport, ipv6, PostFreeze027
Actual Points:            |  Parent ID:
       Points:            |
--------------------------+-----------------------------------------------

Comment (by teor):

 The fixes in comment 15 are required to get
 `policies_parse_exit_policy_internal` working as intended. Currently, the
 `ipv6_exit` parameter is ignored if the last line is `accept *:*`. (Which
 can't be the intention, surely.)

 I'll need to add IPv6 entries to DEFAULT_EXIT_POLICY in policies.c as
 well.
 (Previous versions of tor would have parsed it and used it to cover both
 IPv4 and IPv6.)

 And if local_address should take an array of local IPv4 and IPv6
 addresses, not just a single IPv4 address. Split off into #17027. (This is
 a potential security issue, as it allows connections to local ports on an
 exit.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16069#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list