[tor-bugs] #25250 [Core Tor/Tor]: Infinite loop in Rust protover implementation (TROVE-2018-003)

[Tor Bug Tracker & Wiki]

#25250: Infinite loop in Rust protover implementation (TROVE-2018-003)
------------------------------+--------------------------------
     Reporter:  nickm         |      Owner:  nickm
         Type:  defect        |     Status:  assigned
     Priority:  Medium        |  Milestone:  Tor: 0.3.3.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  033-must
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+--------------------------------
 Our rust protover implementation has a denial-of-service problem on
 certain inputs.

 Found by Teor. Calling this a "low-severity", since by default it would be
 medium-severity, but the rust protover code is uncommonly used and
 experimental.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25250>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online