[tor-bugs] #30467 [Core Tor/Tor]: sendme: Fix coverity CID 1444999

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri May 10 13:12:29 UTC 2019


#30467: sendme: Fix coverity CID 1444999
------------------------------+-----------------------------------------
     Reporter:  dgoulet       |      Owner:  dgoulet
         Type:  defect        |     Status:  assigned
     Priority:  High          |  Milestone:  Tor: 0.4.1.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  sendme, tor-relay, 041-must
Actual Points:                |  Parent ID:  #26288
       Points:  0.1           |   Reviewer:
      Sponsor:  SponsorV      |
------------------------------+-----------------------------------------
 Doesn't seems very good but at least not released ;).

 {{{
 *** CID 1445000:  Null pointer dereferences  (FORWARD_NULL)
 /src/core/or/relay.c: 1952 in connection_edge_process_relay_cell()
 1946           log_info(domain,
 1947                    "'connected' received on circid %u for streamid
 %d, "
 1948                    "no conn attached anymore. Ignoring.",
 1949                    (unsigned)circ->n_circ_id, rh.stream_id);
 1950           return 0;
 1951         case RELAY_COMMAND_SENDME:
 >>>     CID 1445000:  Null pointer dereferences  (FORWARD_NULL)
 >>>     Passing null pointer "layer_hint" to "process_sendme_cell", which
 dereferences it.
 1952           return process_sendme_cell(&rh, cell, circ, conn,
 layer_hint, domain);
 1953         case RELAY_COMMAND_RESOLVE:
 1954           if (layer_hint) {
 1955             log_fn(LOG_PROTOCOL_WARN, LD_APP,
 1956                    "resolve request unsupported at AP; dropping.");
 1957             return 0;
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30467>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list