[tor-bugs] #22751 [Core Tor/Tor]: LZMA coder causes crash when the sandbox is enabled

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jun 28 13:46:03 UTC 2017


#22751: LZMA coder causes crash when the sandbox is enabled
------------------------------+--------------------------------
     Reporter:  ahf           |      Owner:
         Type:  defect        |     Status:  new
     Priority:  High          |  Milestone:  Tor: 0.3.1.x-final
    Component:  Core Tor/Tor  |    Version:  Tor: 0.3.1.1-alpha
     Severity:  Normal        |   Keywords:
Actual Points:                |  Parent ID:
       Points:  0.1           |   Reviewer:
      Sponsor:  Sponsor4      |
------------------------------+--------------------------------
 While doing the measurements for Sponsor 4 I noticed that Tor instances
 running as relays or authorities would sometimes crash when the sandbox is
 enabled.

 This is due to the `MALLOC_MP_LIM` value in `sandbox.c`, which is
 currently set to 16 MB, being too low. We limit our LZMA coder to only use
 16 MB, but the coder allocates some additional data other than its
 internal buffer, which leads to the crash.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22751>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list