[tor-bugs] #21576 [Core Tor/Tor]: Bug: Assertion linked_dir_conn_base failed in connection_ap_handshake_send_begin
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Feb 28 12:11:54 UTC 2017
#21576: Bug: Assertion linked_dir_conn_base failed in
connection_ap_handshake_send_begin
---------------------------------+------------------------------------
Reporter: alecmuffett | Owner:
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.0.x-final
Component: Core Tor/Tor | Version: Tor: 0.2.9.9
Severity: Normal | Resolution:
Keywords: crash, 029-backport | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
---------------------------------+------------------------------------
Changes (by teor):
* keywords: => crash, 029-backport
* component: Core Tor => Core Tor/Tor
* milestone: => Tor: 0.3.0.x-final
Comment:
(Fixing the accidental reverts caused by the last update.)
Marking for possible backport to 0.2.9: this crash bug causes denial-of-
service, so it may qualify as a security issue.
A simple fix for 0.2.9 is to `BUG()` and `return -1` rather than crashing
when either of the relevant pair of assertions fail.
Earlier in the function, we should probably `BUG()` and `return -1` if the
stream is marked for close. (Or is in an inconsistent state: there should
be no way that a `linked` connection has a NULL `linked_conn`.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21576#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list