[tor-bugs] #21576 [Core Tor/Tor]: Bug: Assertion linked_dir_conn_base failed in connection_ap_handshake_send_begin

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 28 12:11:54 UTC 2017


#21576: Bug: Assertion linked_dir_conn_base failed in
connection_ap_handshake_send_begin
---------------------------------+------------------------------------
 Reporter:  alecmuffett          |          Owner:
     Type:  defect               |         Status:  new
 Priority:  Medium               |      Milestone:  Tor: 0.3.0.x-final
Component:  Core Tor/Tor         |        Version:  Tor: 0.2.9.9
 Severity:  Normal               |     Resolution:
 Keywords:  crash, 029-backport  |  Actual Points:
Parent ID:                       |         Points:
 Reviewer:                       |        Sponsor:
---------------------------------+------------------------------------
Changes (by teor):

 * keywords:   => crash, 029-backport
 * component:  Core Tor => Core Tor/Tor
 * milestone:   => Tor: 0.3.0.x-final


Comment:

 (Fixing the accidental reverts caused by the last update.)

 Marking for possible backport to 0.2.9: this crash bug causes denial-of-
 service, so it may qualify as a security issue.

 A simple fix for 0.2.9 is to `BUG()` and `return -1` rather than crashing
 when either of the relevant pair of assertions fail.

 Earlier in the function, we should probably `BUG()` and `return -1` if the
 stream is marked for close. (Or is in an inconsistent state: there should
 be no way that a `linked` connection has a NULL `linked_conn`.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21576#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list