[tor-commits] [tor/release-0.2.5] Make log message warn about detected attempts to exploit 21018.

[nickm@xxxxxxxxxxxxxx]

commit 0fb3058eced5dce355d777288bd9ec255b875db4
Author: Nick Mathewson <nickm@xxxxxxxxxxxxxx>
Date:   Sun Dec 18 20:17:28 2016 -0500

    Make log message warn about detected attempts to exploit 21018.
---
 src/or/rendcommon.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/or/rendcommon.c b/src/or/rendcommon.c
index d1f8b1a..296df55 100644
--- a/src/or/rendcommon.c
+++ b/src/or/rendcommon.c
@@ -1327,8 +1327,10 @@ rend_cache_store_v2_desc_as_client(const char *desc,
                                                     intro_size);
     if (n_intro_points <= 0) {
       log_warn(LD_REND, "Failed to parse introduction points. Either the "
-               "service has published a corrupt descriptor or you have "
-               "provided invalid authorization data.");
+               "service has published a corrupt descriptor, or you have "
+               "provided invalid authorization data, or (maybe!) the "
+               "server is deliberately serving broken data in an attempt "
+               "to crash you with bug 21018.");
       retval = -2;
       goto err;
     } else if (n_intro_points > MAX_INTRO_POINTS) {



_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits