[tor-bugs] #30428 [Core Tor/Tor]: sendme: Failure to validate authenticated SENDMEs client side

[Tor Bug Tracker & Wiki]

#30428: sendme: Failure to validate authenticated SENDMEs client side
-------------------------------------------+-------------------------------
 Reporter:  dgoulet                        |          Owner:  dgoulet
     Type:  defect                         |         Status:  needs_review
 Priority:  Very High                      |      Milestone:  Tor:
                                           |  0.4.1.x-final
Component:  Core Tor/Tor                   |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  tor-circuit, sendme, 041-must  |  Actual Points:
Parent ID:  #26288                         |         Points:  1
 Reviewer:  nickm                          |        Sponsor:  SponsorV
-------------------------------------------+-------------------------------

Comment (by nickm):

 The seems good to me but before we merge, let's talk about integration
 testing.

 How do we know that it actually works on a live network?  What integration
 tests did we _not_ do last time that would have helped us catch this?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30428#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online