[tor-bugs] #25415 [Core Tor/Tor]: moria1 seg faults on testing relay reachability

[Tor Bug Tracker & Wiki]

#25415: moria1 seg faults on testing relay reachability
------------------------------+--------------------
     Reporter:  arma          |      Owner:  (none)
         Type:  defect        |     Status:  new
     Priority:  Medium        |  Milestone:
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+--------------------
 {{{
 [...]
 Mar 03 15:09:16.138 [notice] This version of Tor (0.3.3.3-alpha-dev) is
 newer than any recommended version, according to the directory
 authorities. Recommended versions are:
 0.2.5.16,0.2.5.17,0.2.9.14,0.2.9.15,0.3.1.9,0.3.1.10,0.3.2.8-rc,0.3.2.9,0.3.2.10,0.3.3.1-alpha,0.3.3.2-alpha,0.3.3.3-alpha

 ============================================================ T= 1520107762
 Tor 0.3.3.3-alpha-dev (git-6d44cf66c7cca6e0) died: Caught signal 11
 ../git/src/or/tor(+0x18d2aa)[0x7f7b748152aa]
 ../git/src/or/tor(tor_memeq+0x27)[0x7f7b748355e7]
 ../git/src/or/tor(tor_memeq+0x27)[0x7f7b748355e7]
 ../git/src/or/tor(router_ed25519_id_is_me+0x2a)[0x7f7b7472472a]
 ../git/src/or/tor(connection_or_connect+0x1a8)[0x7f7b747a1ad8]
 ../git/src/or/tor(channel_tls_connect+0xaa)[0x7f7b74758aaa]
 ../git/src/or/tor(dirserv_single_reachability_test+0xa8)[0x7f7b747c4108]
 ../git/src/or/tor(routerlist_descriptors_added+0x90)[0x7f7b7472b0a0]
 ../git/src/or/tor(router_load_routers_from_string+0x438)[0x7f7b747336a8]
 ../git/src/or/tor(+0xab81c)[0x7f7b7473381c]
 ../git/src/or/tor(router_reload_router_list+0x26)[0x7f7b74733926]
 ../git/src/or/tor(do_main_loop+0x2fb)[0x7f7b746db17b]
 ../git/src/or/tor(tor_run_main+0x29b)[0x7f7b746db88b]
 ../git/src/or/tor(tor_main+0x43)[0x7f7b746d61a3]
 ../git/src/or/tor(main+0x19)[0x7f7b746d6039]
 /lib64/libc.so.6(__libc_start_main+0xfd)[0x7f7b731f8d1d]
 ../git/src/or/tor(+0x4df49)[0x7f7b746d5f49]
 Aborted
 }}}

 {{{
 #0  0x00007ffff7ca55e7 in tor_memeq (a=<value optimized out>,
     b=<value optimized out>, sz=<value optimized out>)
     at src/common/di_ops.c:110
 #1  0x00007ffff7b9472a in router_ed25519_id_is_me (id=<value optimized
 out>)
     at src/or/routerkeys.c:1248
 #2  0x00007ffff7c11ad8 in connection_or_connect (_addr=0x7fffffffe180,
     port=443, id_digest=0x7fffeb96c8ac "\fÚ0ÍÛRku>K§\t8p;ïl´¸áv\237\232Z",
     ed_id=0x20, chan=0x7ffffecb8230) at src/or/connection_or.c:1210
 #3  0x00007ffff7bc8aaa in channel_tls_connect (addr=0x7fffffffe180,
 port=443,
     id_digest=0x7fffeb96c8ac "\fÚ0ÍÛRku>K§\t8p;ïl´¸áv\237\232Z",
 ed_id=0x20)
     at src/or/channeltls.c:206
 #4  0x00007ffff7c34108 in dirserv_single_reachability_test (
     now=<value optimized out>, router=0x7fffeb96c880) at
 src/or/dirserv.c:3405
 #5  0x00007ffff7b9b0a0 in routerlist_descriptors_added (sl=0x7ffffb9b2900,
     from_cache=1) at src/or/routerlist.c:4280
 #6  0x00007ffff7ba36a8 in router_load_routers_from_string (
     s=0x7fffee9720f8 "", eos=<value optimized out>,
     saved_location=<value optimized out>, requested_fingerprints=0x0,
     descriptor_digests=0, prepend_annotations=<value optimized out>)
     at src/or/routerlist.c:4415
 #7  0x00007ffff7ba381c in router_reload_router_list_impl
 (store=0x7ffff81306c0)
     at src/or/routerlist.c:1565
 #8  0x00007ffff7ba3926 in router_reload_router_list ()
     at src/or/routerlist.c:1607
 #9  0x00007ffff7b4b17b in do_main_loop () at src/or/main.c:2671
 #10 0x00007ffff7b4b88b in tor_run_main (tor_cfg=<value optimized out>)
     at src/or/main.c:4064
 #11 0x00007ffff7b461a3 in tor_main (argc=3, argv=0x7fffffffe638)
     at src/or/tor_api.c:84
 #12 0x00007ffff7b46039 in main (argc=<value optimized out>,
     argv=<value optimized out>) at src/or/tor_main.c:32
 }}}

 {{{
 #0  0x00007ffff7ca55e7 in tor_memeq (a=<value optimized out>,
     b=<value optimized out>, sz=<value optimized out>)
     at src/common/di_ops.c:110
 110         const uint8_t byte_diff = *ba++ ^ *bb++;
 (gdb) up
 #1  0x00007ffff7b9472a in router_ed25519_id_is_me (id=<value optimized
 out>)
     at src/or/routerkeys.c:1248
 1248        ed25519_pubkey_eq(id, &master_identity_key->pubkey);
 (gdb) up
 #2  0x00007ffff7c11ad8 in connection_or_connect (_addr=0x7fffffffe180,
     port=443, id_digest=0x7fffeb96c8ac "\fÚ0ÍÛRku>K§\t8p;ïl´¸áv\237\232Z",
     ed_id=0x20, chan=0x7ffffecb8230) at src/or/connection_or.c:1210
 1210      if (server_mode(options) && router_ed25519_id_is_me(ed_id)) {
 }}}

 {{{
 (gdb) print ed_id
 $4 = (const ed25519_public_key_t *) 0x20
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25415>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online