[tor-relays] Tor: Possible bug on 0.4.8.9 exit relay.

[George Hartley]

Hi,

while going through journalctl I noticed the following entries from my exit relay and wanted to report this non-fatal assertion.

I also host a Guard relay on the same VM and IP, and it did not yet assert that message.

The full assert() with the stack-trace is as follows:


> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] tor_bug_occurred_(): Bug: src/core/or/conflux.c:565: conflux_pick_first_leg: Non-fatal assertion !(smartlist_len(cfx->legs) <= 0) failed. (on Tor 0.4.8.9 )Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug: Tor 0.4.8.9: Non-fatal assertion !(smartlist_len(cfx->legs) <= 0) failed in conflux_pick_first_leg at src/core/or/conflux.c:565. Stack trace: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(log_backtrace_impl+0x5d) [0x5fdf47b6a9ad] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_bug_occurred_+0x194) [0x5fdf47b81764] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(conflux_decide_next_circ+0x3fe) [0x5fdf47c2031e] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(circuit_get_package_window+0x6d) [0x5fdf47c285ed] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x9bc59) [0x5fdf47b15c59] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(connection_edge_package_raw_inbuf+0xa9) [0x5fdf47b15e39] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(connection_edge_process_inbuf+0x76) [0x5fdf47c42866] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x1c0218) [0x5fdf47c3a218] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x6e72d) [0x5fdf47ae872d] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libevent-2.1.so.7(+0x22c45) [0x7d444a49cc45] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libevent-2.1.so.7(event_base_loop+0x4ff) [0x7d444a49e3af] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(do_main_loop+0x104) [0x5fdf47ae8f44] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_run_main+0x215) [0x5fdf47aed165] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_main+0x5e) [0x5fdf47aed5ee] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(main+0x1d) [0x5fdf47adf08d] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libc.so.6(+0x27cd0) [0x7d4449a7ecd0] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libc.so.6(__libc_start_main+0x8a) [0x7d4449a7ed8a] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(_start+0x25) [0x5fdf47adf0e5] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: Matching client sets: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_log_set(): Bug: Conflux 21CEFB4FACA11A02: 0 linked, 0 launched. Delivered: 7272; teardown: 0; Current: (nil), Previous: (nil) (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: Matching server sets: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_log_set(): Bug: Conflux 21CEFB4FACA11A02: 0 linked, 0 launched. Delivered: 7272; teardown: 0; Current: (nil), Previous: (nil) (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: End conflux set dump (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] circuit_get_package_window(): Bug: Conflux has no circuit to send on. Circuit 0x5fdf581d3460 idx 4524 marked at line src/core/or/command.c:663 (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] tor_bug_occurred_(): Bug: src/core/or/conflux.c:565: conflux_pick_first_leg: Non-fatal assertion !(smartlist_len(cfx->legs) <= 0) failed. (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug: Tor 0.4.8.9: Non-fatal assertion !(smartlist_len(cfx->legs) <= 0) failed in conflux_pick_first_leg at src/core/or/conflux.c:565. Stack trace: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(log_backtrace_impl+0x5d) [0x5fdf47b6a9ad] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_bug_occurred_+0x194) [0x5fdf47b81764] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(conflux_decide_next_circ+0x3fe) [0x5fdf47c2031e] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(circuit_get_package_window+0x6d) [0x5fdf47c285ed] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x9bc59) [0x5fdf47b15c59] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(connection_edge_package_raw_inbuf+0xa9) [0x5fdf47b15e39] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(connection_edge_process_inbuf+0x76) [0x5fdf47c42866] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x1c078f) [0x5fdf47c3a78f] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(+0x6e72d) [0x5fdf47ae872d] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libevent-2.1.so.7(+0x22c45) [0x7d444a49cc45] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libevent-2.1.so.7(event_base_loop+0x4ff) [0x7d444a49e3af] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(do_main_loop+0x104) [0x5fdf47ae8f44] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_run_main+0x215) [0x5fdf47aed165] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(tor_main+0x5e) [0x5fdf47aed5ee] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(main+0x1d) [0x5fdf47adf08d] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libc.so.6(+0x27cd0) [0x7d4449a7ecd0] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/lib/libc.so.6(__libc_start_main+0x8a) [0x7d4449a7ed8a] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] Bug:     /usr/bin/tor(_start+0x25) [0x5fdf47adf0e5] (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: Matching client sets: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_log_set(): Bug: Conflux 21CEFB4FACA11A02: 0 linked, 0 launched. Delivered: 7272; teardown: 0; Current: (nil), Previous: (nil) (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: Matching server sets: (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_log_set(): Bug: Conflux 21CEFB4FACA11A02: 0 linked, 0 launched. Delivered: 7272; teardown: 0; Current: (nil), Previous: (nil) (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] conflux_pick_first_leg(): Bug: End conflux set dump (on Tor 0.4.8.9 )
> Dec 14 16:29:36 matrix tor[575]: Dec 14 16:29:36.000 [warn] circuit_get_package_window(): Bug: Conflux has no circuit to send on. Circuit 0x5fdf581d3460 idx 4524 marked at line src/core/or/command.c:663 (on Tor 0.4.8.9 )


Note how it happened twice for the same circuit.

This is the relays configuration:


> # Main Config
> User tor
> ORPort 443 IPv4Only
> DirPort 0
> SOCKSPort 0
> ControlPort 9051
> ShutdownWaitLength 60
> CookieAuthentication 1
> Nickname TrafficGuardExit
> RelayBandwidthRate 12500 KBytes
> RelayBandwidthBurst 15000 KBytes
> DataDirectory /var/lib/tor/tor_exit
> ContactInfo 0x576768BA hartley_george at proton.me
> 

> # Exit Policy
> 

> ExitPolicy reject *:22
> ExitPolicy reject *:25
> ExitPolicy accept *:*
> 

> # Node Family
> 

> MyFamily $AF42E6C77196A37F041A1A1E953E51B4656BDC1B, $7F7D1A5BE88FA7C9358955705AE7AFA61EEDA2B0
> 

> # Acceleration
> 

> HardwareAccel 1
> NumCPUs 4
> 

> # Sandboxing
> 

> Sandbox 1


I will try to cooperate as best as possible, but my life is kind of messy right now.

And because of TROVE-2023-007, I will have to update the relay to version 0.4.8.10, and reading the change-log of that version, it might actually fix this assert.

Still wanted to let you guys know.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20231216/77721105/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: publickey - hartley_george at proton.me - 0xAEE8E00F.asc
Type: application/pgp-keys
Size: 657 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20231216/77721105/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20231216/77721105/attachment-0001.sig>