[tor-bugs] #23055 [Core Tor/Tor]: Y2038 bug in certificate expiration parsing.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Jul 28 14:29:21 UTC 2017
#23055: Y2038 bug in certificate expiration parsing.
------------------------------+--------------------------------
Reporter: nickm | Owner:
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------+--------------------------------
In this code:
{{{
const uint32_t expiration_date = rsa_ed_crosscert_get_expiration(cc);
const uint64_t expiration_time = expiration_date * 3600;
}}}
Coverity caught this as CID 1415728.
No backport, since all current Tor releases will be obsolete by the time
anyone hits this bug.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23055>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list