[tor-bugs] #27803 [Core Tor/Tor]: rust protover_all_supported() double-free of *missing_out

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 20 23:39:11 UTC 2018


#27803: rust protover_all_supported() double-free of *missing_out
-------------------------+-------------------------------------------------
     Reporter:  teor     |      Owner:  (none)
         Type:  defect   |     Status:  new
     Priority:  Medium   |  Milestone:  Tor: 0.3.5.x-final
    Component:  Core     |    Version:  Tor: 0.3.3.1-alpha
  Tor/Tor                |   Keywords:  rust, protover, memory-safety,
     Severity:  Normal   |  035-must, fast-fix, 033-backport, 034-backport
Actual Points:           |  Parent ID:  #27740
       Points:           |   Reviewer:
      Sponsor:           |
-------------------------+-------------------------------------------------
 `*missing_out` is allocated in Rust, deallocated in Rust (when the
 function returns), used in C, and then freed in C

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27803>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list