[tor-bugs] #21509 [Core Tor/Tor]: Fuzz v3 hidden services

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Feb 19 12:01:34 UTC 2017


#21509: Fuzz v3 hidden services
------------------------------+-----------------------------------
     Reporter:  teor          |      Owner:
         Type:  enhancement   |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.3.1.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  fuzz, prop224, tor-hs
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+-----------------------------------
 If we want the fuzzer to effectively fuzz v3 hidden services, we need to:
 * fuzz GET requests: #21476
 * fuzz POST requests: #21478
 * add v3 GET and POST requests to the fuzzing corpus
 * disable the encrypted connection check when fuzzing (we should do this
 for v2 services as well)
 * create a v3 descriptor fuzzer
 * add v3 descriptor examples to the fuzzing corpus

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21509>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list