[tor-bugs] #34084 [Core Tor/Tor]: HSv3: Bug at setup_intro_circ_auth_key at ../src/feature/hs/hs_client.c:739
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon May 4 15:13:56 UTC 2020
#34084: HSv3: Bug at setup_intro_circ_auth_key at ../src/feature/hs/hs_client.c:739
--------------------------+----------------------------------------
Reporter: s7r | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Core Tor/Tor | Version: Tor: 0.4.4.0-alpha-dev
Severity: Normal | Resolution:
Keywords: tor-hs | Actual Points:
Parent ID: #34082 | Points:
Reviewer: | Sponsor:
--------------------------+----------------------------------------
Description changed by asn:
Old description:
> Client side HSv3 non fatal bug. It occurs like between ~80-120 times in a
> total of 100.000 built rendezvous circuits:
>
> {{{
> Mar 31 18:44:17.000 [warn] tor_bug_occurred_(): Bug:
> ../src/feature/hs/hs_client.c:739: setup_intro_circ_auth_key: This line
> should not have been reached. (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: Tor 0.4.4.0-alpha-dev: Line unexpectedly
> reached at setup_intro_circ_auth_key at
> ../src/feature/hs/hs_client.c:739. Stack trace: (on Tor 0.4.4.0-alpha-dev
> )
> Mar 31 18:44:17.000 [warn] Bug: tor(log_backtrace_impl+0x56)
> [0x55d874ac7ee6] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(tor_bug_occurred_+0x16c)
> [0x55d874ac30ec] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug:
> tor(hs_client_circuit_has_opened+0x342) [0x55d8749ceb22] (on Tor 0.4.4.0
> -alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug:
> tor(circuit_send_next_onion_skin+0x2b8) [0x55d874930d38] (on Tor 0.4.4.0
> -alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(+0xbe4ba) [0x55d8749664ba] (on
> Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(+0xbf1c5) [0x55d8749671c5] (on
> Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(circuit_receive_relay_cell+0x2b4)
> [0x55d874968a44] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(command_process_cell+0x2c8)
> [0x55d87494b788] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(channel_tls_handle_cell+0x4eb)
> [0x55d87492af0b] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(+0xac5ca) [0x55d8749545ca] (on
> Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(connection_handle_read+0xa92)
> [0x55d8749183a2] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(+0x75609) [0x55d87491d609] (on
> Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
> gnu/libevent-2.1.so.6(+0x229ba) [0x7f1984b569ba] (on Tor 0.4.4.0-alpha-
> dev )
> Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
> gnu/libevent-2.1.so.6(event_base_loop+0x5a7) [0x7f1984b57537] (on Tor
> 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(do_main_loop+0xff)
> [0x55d87491e88f] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(tor_run_main+0x10b5)
> [0x55d87490bbc5] (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(tor_main+0x3a) [0x55d8749092ca]
> (on Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(main+0x19) [0x55d874908e89] (on
> Tor 0.4.4.0-alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
> gnu/libc.so.6(__libc_start_main+0xeb) [0x7f198443809b] (on Tor 0.4.4.0
> -alpha-dev )
> Mar 31 18:44:17.000 [warn] Bug: tor(_start+0x2a) [0x55d874908eda] (on
> Tor 0.4.4.0-alpha-dev )
> }}}
New description:
Client side HSv3 non fatal bug. It occurs like between ~80-120 times in a
total of 100.000 built rendezvous circuits.
Seems like Tor is unable to find the right pubkey to assign to the
introduction circuit and this causes a wave of asserts (also see dup
#34085).
{{{
Mar 31 18:44:17.000 [warn] tor_bug_occurred_(): Bug:
../src/feature/hs/hs_client.c:739: setup_intro_circ_auth_key: This line
should not have been reached. (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: Tor 0.4.4.0-alpha-dev: Line unexpectedly
reached at setup_intro_circ_auth_key at ../src/feature/hs/hs_client.c:739.
Stack trace: (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(log_backtrace_impl+0x56)
[0x55d874ac7ee6] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_bug_occurred_+0x16c)
[0x55d874ac30ec] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug:
tor(hs_client_circuit_has_opened+0x342) [0x55d8749ceb22] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug:
tor(circuit_send_next_onion_skin+0x2b8) [0x55d874930d38] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xbe4ba) [0x55d8749664ba] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xbf1c5) [0x55d8749671c5] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(circuit_receive_relay_cell+0x2b4)
[0x55d874968a44] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(command_process_cell+0x2c8)
[0x55d87494b788] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(channel_tls_handle_cell+0x4eb)
[0x55d87492af0b] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xac5ca) [0x55d8749545ca] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(connection_handle_read+0xa92)
[0x55d8749183a2] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0x75609) [0x55d87491d609] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libevent-2.1.so.6(+0x229ba) [0x7f1984b569ba] (on Tor 0.4.4.0-alpha-dev
)
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libevent-2.1.so.6(event_base_loop+0x5a7) [0x7f1984b57537] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(do_main_loop+0xff)
[0x55d87491e88f] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_run_main+0x10b5)
[0x55d87490bbc5] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_main+0x3a) [0x55d8749092ca]
(on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(main+0x19) [0x55d874908e89] (on
Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libc.so.6(__libc_start_main+0xeb) [0x7f198443809b] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(_start+0x2a) [0x55d874908eda] (on
Tor 0.4.4.0-alpha-dev )
}}}
This gets shortly followed by:
{{{
Mar 31 18:44:17.000 [warn] tor_bug_occurred_(): Bug:
../src/feature/hs/hs_client.c:518: intro_circ_is_ok: Non-fatal assertion
!(!hs_ident_intro_circ_is_valid(circ->hs_ident)) failed. (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: Tor 0.4.4.0-alpha-dev: Non-fatal assertion
!(!hs_ident_intro_circ_is_valid(circ->hs_ident)) failed in
intro_circ_is_ok at ../src/feature/hs/hs_client.c:518. Stack trace: (on
Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(log_backtrace_impl+0x56)
[0x55d874ac7ee6] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_bug_occurred_+0x16c)
[0x55d874ac30ec] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(hs_client_send_introduce1+0x271)
[0x55d8749ce5e1] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug:
tor(connection_ap_handshake_attach_circuit+0x3bd) [0x55d874949d5d] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug:
tor(connection_ap_attach_pending+0x178) [0x55d87494e108] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug:
tor(circuit_send_next_onion_skin+0x2b8) [0x55d874930d38] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xbe4ba) [0x55d8749664ba] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xbf1c5) [0x55d8749671c5] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(circuit_receive_relay_cell+0x2b4)
[0x55d874968a44] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(command_process_cell+0x2c8)
[0x55d87494b788] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(channel_tls_handle_cell+0x4eb)
[0x55d87492af0b] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0xac5ca) [0x55d8749545ca] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(connection_handle_read+0xa92)
[0x55d8749183a2] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(+0x75609) [0x55d87491d609] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libevent-2.1.so.6(+0x229ba) [0x7f1984b569ba] (on Tor 0.4.4.0-alpha-dev
)
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libevent-2.1.so.6(event_base_loop+0x5a7) [0x7f1984b57537] (on Tor
0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(do_main_loop+0xff)
[0x55d87491e88f] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_run_main+0x10b5)
[0x55d87490bbc5] (on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(tor_main+0x3a) [0x55d8749092ca]
(on Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(main+0x19) [0x55d874908e89] (on
Tor 0.4.4.0-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: /lib/x86_64-linux-
gnu/libc.so.6(__libc_start_main+0xeb) [0x7f198443809b] (on Tor 0.4.4.0
-alpha-dev )
Mar 31 18:44:17.000 [warn] Bug: tor(_start+0x2a) [0x55d874908eda] (on
Tor 0.4.4.0-alpha-dev )
}}}
--
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34084#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list