[tor-bugs] #18938 [Core Tor/Tor]: Authorities should reject non-ASCII content in ExtraInfo descriptors

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jul 8 00:01:50 UTC 2016


#18938: Authorities should reject non-ASCII content in ExtraInfo descriptors
----------------------------------+------------------------------------
 Reporter:  teor                  |          Owner:
     Type:  defect                |         Status:  new
 Priority:  Medium                |      Milestone:  Tor: 0.2.9.x-final
Component:  Core Tor/Tor          |        Version:
 Severity:  Normal                |     Resolution:
 Keywords:  needs-proposal-maybe  |  Actual Points:
Parent ID:  #18656                |         Points:  1
 Reviewer:                        |        Sponsor:
----------------------------------+------------------------------------

Comment (by atagar):

 I find the 'fast' comment amusing. I first reported that a relay was
 publishing malformed extrainfo descriptors over three months ago so...
 yeah. 'Fast' isn't the word that comes to mind. :P

 Directory authorities should not publish malformed documents. This is a
 gap in the validation tor does. This is why I have a DocTor check that
 validates everything coming from the DirAuths - because Tor's validation
 is quite a bit laxer than Stem's.

 > How many relays does this affect?

 At the moment one. A single relay has been publishing malformed ExtraInfo
 documents for months.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18938#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list