[tor-bugs] #8976 [Tor]: rend_service_introduce() doesn't notice if the rendezvous point is on 127.0.0.1

[Tor Bug Tracker & Wiki]

#8976: rend_service_introduce() doesn't notice if the rendezvous point is on
127.0.0.1
---------------------------------+------------------------------------
 Reporter:  arma                 |          Owner:  teor
     Type:  defect               |         Status:  needs_review
 Priority:  Medium               |      Milestone:  Tor: 0.2.7.x-final
Component:  Tor                  |        Version:  Tor: 0.2.3.21-rc
 Severity:  Normal               |     Resolution:
 Keywords:  tor-hs 027-backport  |  Actual Points:
Parent ID:                       |         Points:
 Reviewer:                       |        Sponsor:  SponsorR-must
---------------------------------+------------------------------------

Comment (by andrea):

 Eh, backporting always does carry a small but non-zero risk of new bugs in
 the old branch, though - it's trading off two different versions of 'safe'
 rather than a question of 'better safe than sorry'.  I think my preferred
 standard is something more like "plausibly exploitable, or fixes a
 crash/assert/memory leak level bug"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8976#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online