[tor-bugs] #18253 [Tor]: (Sandbox) Caught a bad syscall attempt (syscall chown)

[Tor Bug Tracker & Wiki]

#18253: (Sandbox) Caught a bad syscall attempt (syscall chown)
--------------------+------------------------------------
 Reporter:  weasel  |          Owner:  nickm
     Type:  defect  |         Status:  accepted
 Priority:  High    |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor     |        Version:  Tor: 0.2.8.1-alpha
 Severity:  Normal  |     Resolution:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
  Sponsor:          |
--------------------+------------------------------------

Comment (by weasel):

 Bisecting between master and 0.2.7.6:

 {{{
 [git|dcbfe46...|bisect] weasel at valiant:~/projects/tor/tor$ git bisect bad
 dcbfe46cd63e041a5bfc4f1de008a7f9025dffce is the first bad commit
 commit dcbfe46cd63e041a5bfc4f1de008a7f9025dffce
 Author: Jamie Nguyen <j at jamielinux.com>
 Date:   Fri Nov 13 13:57:11 2015 +0000

     Defer creation of Unix socket until after setuid

 :040000 040000 676aa813efc517daf0b6100a11baba0729418bc7
 0db72ad4c78b0a7aba8ec393e8744c187e966a18 M      changes
 :040000 040000 1226793c73477f14743b846edd3bdc20440e8b43
 1a06efee9841a5c1517004c2afd2e508a160caf6 M      src
 [git|dcbfe46...|bisect] weasel at valiant:~/projects/tor/tor$ git bisect log
 git bisect start
 # bad: [1f5cdf2b6c72ae89eea630a2c4693273ff1aee6c] Merge branch
 'maint-0.2.7'
 git bisect bad 1f5cdf2b6c72ae89eea630a2c4693273ff1aee6c
 # good: [9ccf019b168909ef6674c71aebda9f90516bb6a1] Merge branch
 'maint-0.2.6' into release-0.2.6
 git bisect good 9ccf019b168909ef6674c71aebda9f90516bb6a1
 # good: [f620b8f03286de641329cd9ae2027f3628a7d2a1] bump version to
 0.2.6.7-dev
 git bisect good f620b8f03286de641329cd9ae2027f3628a7d2a1
 # good: [047989ea288fa1e3099f1897a3596abd6f2e8860] fixup add
 malformed_list to unit tests from d3358a0a05f6 IPv6 wildcards
 git bisect good 047989ea288fa1e3099f1897a3596abd6f2e8860
 # good: [e5754c42d124549b3fd8e8d7c11d4dde3b5acec1] Merge branch
 'bug17686_v2_027'
 git bisect good e5754c42d124549b3fd8e8d7c11d4dde3b5acec1
 # bad: [7b0cbf22c0fb347db1e7436464865d395aed0ce5] Merge remote-tracking
 branch 'yawning/feature17783_take2'
 git bisect bad 7b0cbf22c0fb347db1e7436464865d395aed0ce5
 # bad: [01334589f1eae801b4ed8fb72fe3816ad5b0fe78] Simplify cpd_opts usage.
 git bisect bad 01334589f1eae801b4ed8fb72fe3816ad5b0fe78
 # good: [252149e8b4697c570097acd514c433b8215f24dd] Merge branch
 'maint-0.2.7'
 git bisect good 252149e8b4697c570097acd514c433b8215f24dd
 # good: [b3eba8ef12c714e1b97b9026da96d27433064a1e] Merge branch 'refactor-
 effective-entry'
 git bisect good b3eba8ef12c714e1b97b9026da96d27433064a1e
 # good: [390d3fa3af28825e152aadd244e3855d067179c0] add a static
 git bisect good 390d3fa3af28825e152aadd244e3855d067179c0
 # good: [9f6b9e28ccfdc3a96fb6e28d5121539f3cba3c55] forward-port changelog
 and releasenotes
 git bisect good 9f6b9e28ccfdc3a96fb6e28d5121539f3cba3c55
 # good: [d68b7fd4422f6ea1cad18a26b6a46b61bc182285] Refactor clock skew
 warning code to avoid duplication
 git bisect good d68b7fd4422f6ea1cad18a26b6a46b61bc182285
 # good: [ec4ef68271ab65b4ec643088153211e861cdc7b3] Introduce
 DataDirectoryGroupReadable boolean
 git bisect good ec4ef68271ab65b4ec643088153211e861cdc7b3
 # bad: [dcbfe46cd63e041a5bfc4f1de008a7f9025dffce] Defer creation of Unix
 socket until after setuid
 git bisect bad dcbfe46cd63e041a5bfc4f1de008a7f9025dffce
 # first bad commit: [dcbfe46cd63e041a5bfc4f1de008a7f9025dffce] Defer
 creation of Unix socket until after setuid
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18253#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online