Re: [tor-bugs] #33817 [Core Tor/Tor]: Perform Basic Relay IPv6 Extends

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#33817: Perform Basic Relay IPv6 Extends
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:  teor
     Type:  task                                 |         Status:
                                                 |  needs_revision
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.4.4.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ipv6, prop311, technical-debt-       |  Actual Points:
  partial                                        |
Parent ID:  #33220                               |         Points:  1
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor55-must
-------------------------------------------------+-------------------------

Old description:

> Currently, tor checks that extend cells have IPv4 addresses in:
> [ ] some functions in circuitbuild_relay.c (a new file introduced by
> #33633)
> [x] check_extend_cell() in onion.c
> [x] extend_cell_from_extend2_cell_body() in onion.c
> [ ] and possibly other functions.
>
> We also want to fix a missing IPv6 check in:
> [x] connection_or_check_canonicity(), where only IPv4 addresses are
> considered canonical,
>   * (note that channel_tls_process_netinfo_cell() already handles IPv6
> canonicity correctly)
>
> The canonical fix also fixes:
> [x] channel_get_for_extend(), where only channels with IPv4 addresses are
> searched.
>
> Unlike the other changes, this change is a bug fix, and should not depend
> on the relay's configuration.

New description:

 Currently, tor checks that extend cells have IPv4 addresses in:
 [ ] some functions in circuitbuild_relay.c (a new file introduced by
 #33633)
 [x] channel_get_for_extend() in channel.c
 [x] check_extend_cell() in onion.c
 [x] extend_cell_from_extend2_cell_body() in onion.c
 [ ] and possibly other functions.

 We also want to fix a missing IPv6 check in:
 [x] connection_or_check_canonicity(), where only IPv4 addresses are
 considered canonical,
   * (note that channel_tls_process_netinfo_cell() already handles IPv6
 canonicity correctly)

 Unlike the other changes, the connection_or_check_canonicity() change is a
 bug fix. Other code already considers IPv6 connections canonical.

--

Comment (by teor):

 Further edits

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33817#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs