[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #24150 [Core Tor/Tor]: Memory leak in v3 hsdesc parsing with empty encrypted data.

#24150: Memory leak in v3 hsdesc parsing with empty encrypted data.
---------------------------------+------------------------------------
 Reporter:  nickm                |          Owner:  nickm
     Type:  defect               |         Status:  needs_review
 Priority:  Medium               |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor         |        Version:
 Severity:  Normal               |     Resolution:
 Keywords:  tor-hs, memory-leak  |  Actual Points:
Parent ID:                       |         Points:
 Reviewer:                       |        Sponsor:
---------------------------------+------------------------------------
Changes (by nickm):

 * cc: asn, dgoulet (added)
 * keywords:   => tor-hs, memory-leak
 * status:  assigned => needs_review


Comment:

 Please see branch `bug24150_032` in my repository for a simple fix.  I'm
 calling this "not a bad security problem" because the memory leak is rate-
 limited by client activity, and because this is in an alpha.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24150#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs