[tor-bugs] #33900 [Core Tor/Tor]: Check for invalid zero IPv4 addresses and ports in extend cells

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 14 05:51:58 UTC 2020


#33900: Check for invalid zero IPv4 addresses and ports in extend cells
-------------------------------+-------------------------------------------
     Reporter:  teor           |      Owner:  teor
         Type:  defect         |     Status:  assigned
     Priority:  Medium         |  Milestone:  Tor: 0.4.4.x-final
    Component:  Core Tor/Tor   |    Version:  Tor: 0.2.4.8-alpha
     Severity:  Normal         |   Keywords:  ipv6, prop311, technical-debt
Actual Points:                 |  Parent ID:  #33817
       Points:  0              |   Reviewer:
      Sponsor:                 |
  Sponsor55-must               |
-------------------------------+-------------------------------------------
 When we send and parse extend cells, we check that their IPv4 address
 field is not AF_UNSPEC.

 But we should also check for zero IPv4 addresses and zero ports. (Which
 are both invalid.)

 Code and points in #33817, I just needed a separate bug number.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33900>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list