[tor-commits] [tor/maint-0.2.7] Make log message warn about detected attempts to exploit 21018.

nickm at torproject.org nickm at torproject.org
Tue Dec 20 23:16:34 UTC 2016


commit 0fb3058eced5dce355d777288bd9ec255b875db4
Author: Nick Mathewson <nickm at torproject.org>
Date:   Sun Dec 18 20:17:28 2016 -0500

    Make log message warn about detected attempts to exploit 21018.
---
 src/or/rendcommon.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/or/rendcommon.c b/src/or/rendcommon.c
index d1f8b1a..296df55 100644
--- a/src/or/rendcommon.c
+++ b/src/or/rendcommon.c
@@ -1327,8 +1327,10 @@ rend_cache_store_v2_desc_as_client(const char *desc,
                                                     intro_size);
     if (n_intro_points <= 0) {
       log_warn(LD_REND, "Failed to parse introduction points. Either the "
-               "service has published a corrupt descriptor or you have "
-               "provided invalid authorization data.");
+               "service has published a corrupt descriptor, or you have "
+               "provided invalid authorization data, or (maybe!) the "
+               "server is deliberately serving broken data in an attempt "
+               "to crash you with bug 21018.");
       retval = -2;
       goto err;
     } else if (n_intro_points > MAX_INTRO_POINTS) {





More information about the tor-commits mailing list