[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #14142 [Tor]: A 2-letter torrc file containing "Vi" causes tor to crash
#14142: A 2-letter torrc file containing "Vi" causes tor to crash
--------------------+------------------------------------
Reporter: teor | Owner:
Type: defect | Status: new
Priority: normal | Milestone: Tor: 0.2.7.x-final
Component: Tor | Version: Tor: 0.2.6.2-alpha
Keywords: easy | Actual Points:
Parent ID: | Points:
--------------------+------------------------------------
The parsing of the `VirtualAddrNetworkIPv[46]` options crashes when the
line or file ends after the option itself. (The IPv4? option can be
abbreviated to "Vi").
This is an easy fix that involves checking for the empty string early on,
before we assert on it in the parsing code.
Discovered using afl-fuzz with a custom tor binary that parses a torrc
file from standard input (and doesn't do much else). This kind of fuzzing
would be easier to conduct using a test harness, rather than using the
entire tor binary.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14142>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs