[tor-bugs] #27315 [Core Tor/Tor]: Sandbox regression in 0.3.4.7-rc

[Tor Bug Tracker & Wiki]

#27315: Sandbox regression in 0.3.4.7-rc
---------------------------------------+-----------------------------------
 Reporter:  toralf                     |          Owner:  (none)
     Type:  defect                     |         Status:  needs_information
 Priority:  Medium                     |      Milestone:  Tor:
                                       |  0.3.4.x-final
Component:  Core Tor/Tor               |        Version:  Tor: 0.3.4.7-rc
 Severity:  Normal                     |     Resolution:
 Keywords:  regression?, 034-backport  |  Actual Points:
Parent ID:                             |         Points:
 Reviewer:  ahf                        |        Sponsor:
---------------------------------------+-----------------------------------

Comment (by Jigsaw52):

 I made a small program which uses the same code as tor to setup seccomp
 rules and then opens a file and I get the same behavior as I do with tor
 (crash before the #25440 fix, success after). It also prints the pseudo-
 code for the rules generated by libseccomp.

 The code is here: https://pastebin.com/zQz1sf22

 Compile with: gcc test.c -o test -l seccomp
 Run without arguments to use the rule after the #25440 fix: ./test
 Run with any arguments to use the rule before the #25440 fix: ./test foo

 If someone affected by this, could run the program with and without
 arguments and post both outputs maybe that could help finding out whats
 different between our systems.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27315#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online