[tor-bugs] #27471 [Core Tor/Tor]: HS intermittently fails: Non-fatal assertion failed in send_introduce1

[Tor Bug Tracker & Wiki]

#27471: HS intermittently fails: Non-fatal assertion failed in send_introduce1
-------------------------------------------+-------------------------------
 Reporter:  tgragnato                      |          Owner:  dgoulet
     Type:  defect                         |         Status:  accepted
 Priority:  Very High                      |      Milestone:  Tor:
                                           |  0.3.5.x-final
Component:  Core Tor/Tor                   |        Version:  Tor:
                                           |  0.3.4.7-rc
 Severity:  Minor                          |     Resolution:
 Keywords:  tor-hs, regression?, 035-must  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:
-------------------------------------------+-------------------------------

Comment (by asan):

 I confirm the problem. I also got it on 0.3.4.8, Linux 64:

 {{{
 Oct 03 15:12:59.000 [warn] tor_bug_occurred_(): Bug:
 ../src/or/hs_client.c:559: send_introduce1: Non-fatal assertion !(ip ==
 NULL) failed. (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug: Non-fatal assertion !(ip == NULL) failed
 in send_introduce1 at ../src/or/hs_client.c:559. Stack trace: (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(log_backtrace+0x42)
 [0x55f6b1b0a3e2] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(tor_bug_occurred_+0xb7)
 [0x55f6b1b251d7] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(hs_client_send_introduce1+0x232) [0x55f6b1ae7972] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(connection_ap_handshake_attach_circuit+0x33c)
 [0x55f6b1a78f9c] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(connection_ap_attach_pending+0x1a0) [0x55f6b1a999d0] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(hs_client_receive_rendezvous_acked+0x79) [0x55f6b1ae80b9] (on
 Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(rend_process_relay_cell+0x28b) [0x55f6b1a0416b] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(+0x79097)
 [0x55f6b19fb097] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(circuit_receive_relay_cell+0x311) [0x55f6b19fd0b1] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(command_process_cell+0x280) [0x55f6b1a7a420] (on Tor 0.3.4.8
 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(channel_tls_handle_cell+0x273) [0x55f6b1a5c213] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(+0x11db2c)
 [0x55f6b1a9fb2c] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:
 /usr/bin/tor(connection_handle_read+0x892) [0x55f6b1a96542] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(+0x53a61)
 [0x55f6b19d5a61] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/lib/x86_64-linux-
 gnu/libevent-2.0.so.5(event_base_loop+0x7fc) [0x7efce43a43dc] (on Tor
 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(do_main_loop+0x25f)
 [0x55f6b19d7e0f] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(tor_run_main+0x1165)
 [0x55f6b19da2e5] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(tor_main+0x3a)
 [0x55f6b19d232a] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(main+0x19)
 [0x55f6b19d2099] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /lib/x86_64-linux-
 gnu/libc.so.6(__libc_start_main+0xf5) [0x7efce2d28b45] (on Tor 0.3.4.8 )
 Oct 03 15:12:59.000 [warn] Bug:     /usr/bin/tor(+0x500e9)
 [0x55f6b19d20e9] (on Tor 0.3.4.8 )
 }}}

 It happened when I tried to reload browser tab with onion v3 service which
 is highly suspected to be blocked or censored using any means including
 sophisticated network attacks.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27471#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online