[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #25036 [Core Tor/Tor]: Tor 0.3.2 rejects connections to raw ipv6 addresses

#25036: Tor 0.3.2 rejects connections to raw ipv6 addresses
------------------------------------------+--------------------------------
 Reporter:  pastly                        |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  High                          |      Milestone:  Tor:
                                          |  0.3.3.x-final
Component:  Core Tor/Tor                  |        Version:  Tor:
                                          |  0.3.2.1-alpha
 Severity:  Normal                        |     Resolution:
 Keywords:  regression ipv6 032-backport  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:
------------------------------------------+--------------------------------

Comment (by dgoulet):

 Replying to [comment:13 teor]:
 > Replying to [comment:12 dgoulet]:
 > > Quick question on this. Are we sure this is not Tor Browser sending a
 SOCKS5 request with the type "fqdn" used with an IPv6 address?
 > >
 > > That `string_is_valid_hostname()` check is done when we get an `atyp =
 0x03` in the SOCKS5 request which means tor should expect a FQDN thus
 returning the error here is fine. The IPv6 address is handled before.
 > >
 > > Why is TB sending a fqdn request at all with this address:
 https://[2a00:1450:401b:800::200e]/ ?
 > Tor Browser is obviously sending IPv4 and IPv6 addresses as text, in
 violation of the spec. Tor has always accepted IPv4 addresses as text, in
 violation of the spec. Therefore, we should accept IPv6 addresses as text,
 just like we did in 0.3.1. Because we can't break a feature like this.

 Well Tor Browser ships its own "tor" so it can fix this and just use a
 "tor" that have this working?

 I do see the importance of not breaking a feature even though it means
 violating the spec but with TB, it controls the whole chain. If TB can't
 fix this, then I agree that tor should just revert to accepting IPv4/IPv6
 string values.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25036#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs