[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27896 [Core Tor/Tor]: base32 padding inconsistency between client and server in HS v3 client auth preview
#27896: base32 padding inconsistency between client and server in HS v3 client auth
preview
-----------------------------+------------------------------------
Reporter: jchevali | Owner: (none)
Type: defect | Status: needs_information
Priority: Medium | Milestone: Tor: unspecified
Component: Core Tor/Tor | Version: Tor: 0.3.5.1-alpha
Severity: Normal | Resolution:
Keywords: tor-hs, hs-auth | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-----------------------------+------------------------------------
Comment (by jchevali):
Perhaps you'd like to deal with the assertion failed issue in the ticket
that pege's opened, #28129 (although that same stack trace was presented
here earlier), and leave this ticket for the other issues, namely, how
should we investigate invalid descriptors (by the server that doesn't
crash -- i.e., if given its characteristics, e.g., no GCC, no IPv4, etc.,
you still deem it worthy of testing), and whether padded content should be
allowed (after all under the base32 definition I believe it's legal), and
whether padded entries or otherwise invalid entries (except comments)
should, when they're not among otherwise valid entries, result in an
unsecured service or a secured (closed) one.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27896#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs