[tor-bugs] #30428 [Core Tor/Tor]: sendme: Failure to validate authenticated SENDMEs client side

[Tor Bug Tracker & Wiki]

#30428: sendme: Failure to validate authenticated SENDMEs client side
-------------------------------------------+-------------------------------
 Reporter:  dgoulet                        |          Owner:  dgoulet
     Type:  defect                         |         Status:  needs_review
 Priority:  Very High                      |      Milestone:  Tor:
                                           |  0.4.1.x-final
Component:  Core Tor/Tor                   |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  tor-circuit, sendme, 041-must  |  Actual Points:
Parent ID:  #26288                         |         Points:  1
 Reviewer:                                 |        Sponsor:  SponsorV
-------------------------------------------+-------------------------------
Changes (by dgoulet):

 * keywords:  tor-circuit, sendme => tor-circuit, sendme, 041-must
 * status:  assigned => needs_review


Comment:

 PR: https://github.com/torproject/tor/pull/1005
 Branch: `ticket30428_041_01`

 I spent WAY TOO much time on the big unit test I mentioned... Sending
 cells from one circuit to another is actually extremely hard in our unit
 tests framework so for now I've tabled that test.

 This REALLY must go before 041 is stable.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30428#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online