[tor-bugs] #28558 [Core Tor/Tor]: Crash in memoize_protover_summary() when cache is full

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Nov 21 12:55:15 UTC 2018


#28558: Crash in memoize_protover_summary() when cache is full
------------------------------+--------------------------------
     Reporter:  nickm         |      Owner:  nickm
         Type:  defect        |     Status:  assigned
     Priority:  Very High     |  Milestone:  Tor: 0.4.0.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:  Sponsor8      |
------------------------------+--------------------------------
 In `memoize_protover_summary()`, after we call
 `protover_summary_cache_free_all()`, we need to re-create
 `protover_summary_map`.  Otherwise we'll hit an assertion.

 Found by OSS-Fuzz; not in any released version.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28558>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list