[tor-bugs] #26007 [Core Tor/Tor]: Stop logging stack contents when reading a zero-length bandwidth file

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 2 12:27:21 UTC 2018


#26007: Stop logging stack contents when reading a zero-length bandwidth file
-------------------------+-------------------------------------------------
     Reporter:  teor     |      Owner:  teor
         Type:  defect   |     Status:  assigned
     Priority:  Medium   |  Milestone:  Tor: 0.3.3.x-final
    Component:  Core     |    Version:  Tor: 0.2.2.1-alpha
  Tor/Tor                |   Keywords:  033-must-maybe security-low
     Severity:  Normal   |  032-backport 031-backport 029-backport fast-fix
Actual Points:           |  Parent ID:
       Points:           |   Reviewer:
      Sponsor:           |
-------------------------+-------------------------------------------------
 When reading a zero-length bandwidth file, Tor directory authorities read
 an uninitialised buffer and log it at warning level.

 There is no guarantee that the buffer contains a NUL byte.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26007>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list