[tor-bugs] #25074 [Core Tor/Tor]: TROVE-2018-001: null-pointer crash in directory authority protocol list code (was: TROVE-2018-001)

[Tor Bug Tracker & Wiki]

#25074: TROVE-2018-001: null-pointer crash in directory authority protocol list
code
---------------------------------------+-----------------------------------
 Reporter:  teor                       |          Owner:  nickm
     Type:  defect                     |         Status:  closed
 Priority:  Medium                     |      Milestone:  Tor:
                                       |  0.3.3.x-final
Component:  Core Tor/Tor               |        Version:
 Severity:  Normal                     |     Resolution:  fixed
 Keywords:  033-must, review-group-33  |  Actual Points:
Parent ID:                             |         Points:
 Reviewer:  catalyst                   |        Sponsor:
---------------------------------------+-----------------------------------
Changes (by nickm):

 * status:  merge_ready => closed
 * resolution:   => fixed


Old description:

> For details, see:
> https://trac.torproject.org/projects/tor/wiki/TROVE

New description:

 The subprotocol implementation in 0.2.9.4-alpha had a bug where an
 incorrectly formatted relay descriptor could cause directory servers to
 crash when they tried to vote about it.  This does not affect relays or
 clients, since they do not try to vote.

 Tracked as TROVE-2018-001 and CVE-2018-0490.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25074#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online