Re: [tor-bugs] #2317 [Tor Client]: Missing sanity checks for cbtnummodes consensus parameter

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#2317: Missing sanity checks for cbtnummodes consensus parameter
------------------------+---------------------------------------------------
 Reporter:  Sebastian   |       Owner:     
     Type:  defect      |      Status:  new
 Priority:  normal      |   Milestone:     
Component:  Tor Client  |     Version:     
 Keywords:              |      Parent:     
------------------------+---------------------------------------------------

Comment(by Sebastian):

 Here we go with some more love from doors:

 {{{
 <doors> last version was backdoored. If you can't fix it don't use it.

 <doors> you don't do any sanity checks on the value of the consensus
 parameterS.


 <doors> "if (x <= a) then check if (x >= a) then CRASH"  is backdoor
 masked as 3.y.o. kid's mistake.
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2317#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs