[tor-bugs] #26284 [Core Tor/Tor]: Out-of-bounds smartlist access in protover_compute_vote()

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jun 8 06:02:18 UTC 2018


#26284: Out-of-bounds smartlist access in protover_compute_vote()
--------------------------+------------------------------------
 Reporter:  rl1987        |          Owner:  rl1987
     Type:  defect        |         Status:  needs_revision
 Priority:  Medium        |      Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |        Version:  Tor: unspecified
 Severity:  Normal        |     Resolution:
 Keywords:  fast-fix      |  Actual Points:
Parent ID:  #26196        |         Points:
 Reviewer:  asn           |        Sponsor:
--------------------------+------------------------------------

Comment (by rl1987):

 This bug emerged when I was working on #26196. The simplest way to
 reproduce is to add `#define DEBUG_SMARTLIST` to orconfig.h, recompile and
 run `make test`. There are several unit tests that crash in
 `protover_compute_vote()`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26284#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list