[tor-bugs] #24011 [Core Tor/Tor]: Attempt to open a stream on first hop of circuit

[Tor Bug Tracker & Wiki]

#24011: Attempt to open a stream on first hop of circuit
--------------------------+------------------------------------
 Reporter:  teor          |          Owner:  (none)
     Type:  defect        |         Status:  new
 Priority:  High          |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor  |        Version:  Tor: 0.3.2.2-alpha
 Severity:  Normal        |     Resolution:
 Keywords:  tor-circuit   |  Actual Points:
Parent ID:                |         Points:  1
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------
Changes (by dgoulet):

 * priority:  Medium => High
 * status:  needs_information => new


Comment:

 Ok, I just noticed 4 of those today in a span of ~3 hours. IPs there are
 public relays (and some we know personally so I doubt this is malicious):

 {{{
 Dec 14 14:49:57.994 [warn] Attempt by 137.205.124.35:30658 to open a
 stream on first hop of circuit. Closing.
 Dec 14 15:44:01.534 [warn] Attempt by 109.105.109.162:36601 to open a
 stream on first hop of circuit. Closing.
 Dec 14 17:08:05.864 [warn] Attempt by 217.182.196.67:64478 to open a
 stream on first hop of circuit. Closing.
 Dec 14 17:11:09.928 [warn] Attempt by 85.25.43.31:443 to open a stream on
 first hop of circuit. Closing.
 }}}

 Something is clearly not right and I fear we might have a more important
 bug than we originally thought especially if this is linked to relay
 authentication. Those 4 relays above are on 0.3.1.x series.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24011#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online