[tor-bugs] #22368 [Core Tor/Tor]: double-free of MyFamily lines

[Tor Bug Tracker & Wiki]

#22368: double-free of MyFamily lines
------------------------------------------------+--------------------------
 Reporter:  arma                                |          Owner:
     Type:  defect                              |         Status:
                                                |  needs_review
 Priority:  Medium                              |      Milestone:  Tor:
                                                |  0.3.1.x-final
Component:  Core Tor/Tor                        |        Version:  Tor:
                                                |  0.3.1.1-alpha
 Severity:  Normal                              |     Resolution:
 Keywords:  regression memory-safety tor-relay  |  Actual Points:
Parent ID:                                      |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by arma):

 Speaking of just about anything, it is distantly possible that relays who
 hit this bug will print little pieces of arbitrary memory, if they are
 valid nicknames or hexes, into the Family line of their descriptor. Good
 times.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22368#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online