[tor-bugs] #7164 [Core Tor/Tor]: microdesc.c:378: Bug: microdesc_free() called, but md was still referenced 1 node(s); held_by_nodes == 1

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 1 16:03:53 UTC 2016


#7164: microdesc.c:378: Bug: microdesc_free() called, but md was still referenced
1 node(s); held_by_nodes == 1
-------------------------------------------------+-------------------------
 Reporter:  jaj123                               |          Owner:  nickm
     Type:  defect                               |         Status:
                                                 |  merge_ready
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  0.2.8.x-final
Component:  Core Tor/Tor                         |        Version:  Tor:
                                                 |  0.2.4.19
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-client, 025-backport, nickm-     |  Actual Points:
  should-review, review-group-7                  |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Replying to [comment:74 cypherpunks]:
 > U2FsdGVkX19xU5DZ+k76OvKVNZbPzyTLeVU3rQslY+Bz8xq+mXT59freOTt4KDRQ
 > ScTaE9PCTdMED5CkBlXJuTJfOCJNEO69AskcLeDTRRFT1w9W3QWgxZshpgc8T5qD
 > GwweQ02CWm/bdq0NW070xUHuno10nLbIBAO8a/bzcfSbyquibM+FIZlQTA0n0Fda
 > Qey6pv3d9y7v/Lc8OHfZUD1Vvbe9v9P5xqrpwcwkdT0klI5B5Vgaike7m25P1hDh
 > MBzO6gX3NNnA1ST5pP0qpuFgZMK79uJmbXUj0iECLs6sGD/HgY19p9Vw/T6Pt7P4
 > 8+mh5lUOzcLAX2Lc1yKZEBYIJmSnYwgWYensAepobKH785iuij/a6X4YLdJ39BCz
 > nvkKCfm4cLCLGEG+4MkrRClBN7YtpZ57K9LSyWnxTHKJinFYLpGMc9VYViScYq3E
 > Qm9xVYisuET5bD7tBjgbXCJdF67++7w=
 >
 > (openssl enc -aes-256-xts -d -base64
 > sha256(password) =
 62493873306edef2c14c567d252b5b029d67fe3119c703486209a93bb9e4117e)
 >
 > EDIT: function name copy/paste typo

 Found password
 > echo "the report of my death was an exaggeration" | openssl sha256

 Deciphered
 > get_microdesc_cache() is being called for the first time by
 nodelist_set_consensus(). md->held_by_nodes incremented by
 nodelist_set_consensus() too (nodelist_add_microdesc skip that part as no
 any nodes created yet). microdesc_cache_clean() is being called for the
 first time without held_by_nodes for any md. if no held_by_nodes then no
 bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7164#comment:82>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list