[tor-bugs] #21470 [Core Tor/Tor]: Write unit tests for security regressions

[Tor Bug Tracker & Wiki]

#21470: Write unit tests for security regressions
--------------------------+------------------------------------
 Reporter:  teor          |          Owner:
     Type:  task          |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:  test          |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by teor):

 Please see my branch test21470-029, which tests #21278, #21450, and
 #21507.

 And we should add the http corpus file for #20894 at:
 https://github.com/teor2345/tor/blob/fuzz-dir-
 sensitive-v2/src/test/fuzz/fuzz_dir_testcase/dir-header-read-beyond-
 buffer.case

 Once these are merged, we can close this ticket as done.

 I want to defer fuzzing for issues with v3 hidden services (#21471) - I've
 opened a ticket to implement v3 descriptor fuzzing: #21509. We can do this
 as part of testing hidden services in 0.3.0 or 0.3.1.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21470#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online