[tor-bugs] #18938 [Core Tor/Tor]: Authorities should reject non-ASCII content in ExtraInfo descriptors

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jul 11 11:53:36 UTC 2016


#18938: Authorities should reject non-ASCII content in ExtraInfo descriptors
----------------------------------+------------------------------------
 Reporter:  teor                  |          Owner:
     Type:  defect                |         Status:  new
 Priority:  Medium                |      Milestone:  Tor: 0.2.9.x-final
Component:  Core Tor/Tor          |        Version:
 Severity:  Normal                |     Resolution:
 Keywords:  needs-proposal-maybe  |  Actual Points:
Parent ID:  #18656                |         Points:  1
 Reviewer:                        |        Sponsor:
----------------------------------+------------------------------------

Comment (by cypherpunks):

 Another cypherpunks here.

 Replying to [comment:17 teor]:
 > Currently, the Tor ContactInfo and Platform consist of arbitrary binary
 data, terminated by an ASCII linefeed byte.

 That's not what the spec says. It's supposed to be ASCII. dir-spec 1.2:
   NL = The ascii LF character (hex value 0x0a).
   Document ::= (Item | NL)+
   Item ::= KeywordLine Object*
   KeywordLine ::= Keyword NL | Keyword WS ArgumentChar+ NL
   Keyword = KeywordChar+
   KeywordChar ::= 'A' ... 'Z' | 'a' ... 'z' | '0' ... '9' | '-'
   ArgumentChar ::= any printing ASCII character except NL.
   WS = (SP | TAB)+
   Object ::= BeginLine Base64-encoded-data EndLine
   BeginLine ::= "-----BEGIN " Keyword "-----" NL
   EndLine ::= "-----END " Keyword "-----" NL

 Contact info:
   "contact" info NL

   [At most once]
        Describes a way to contact the relay's administrator, preferably
        including an email address and a PGP key fingerprint.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18938#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list