[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #25074 [Core Tor/Tor]: TROVE-2018-001: null-pointer crash in directory authority protocol list code (was: TROVE-2018-001)

#25074: TROVE-2018-001: null-pointer crash in directory authority protocol list
code
---------------------------------------+-----------------------------------
 Reporter:  teor                       |          Owner:  nickm
     Type:  defect                     |         Status:  closed
 Priority:  Medium                     |      Milestone:  Tor:
                                       |  0.3.3.x-final
Component:  Core Tor/Tor               |        Version:
 Severity:  Normal                     |     Resolution:  fixed
 Keywords:  033-must, review-group-33  |  Actual Points:
Parent ID:                             |         Points:
 Reviewer:  catalyst                   |        Sponsor:
---------------------------------------+-----------------------------------
Changes (by nickm):

 * status:  merge_ready => closed
 * resolution:   => fixed


Old description:

> For details, see:
> https://trac.torproject.org/projects/tor/wiki/TROVE

New description:

 The subprotocol implementation in 0.2.9.4-alpha had a bug where an
 incorrectly formatted relay descriptor could cause directory servers to
 crash when they tried to vote about it.  This does not affect relays or
 clients, since they do not try to vote.

 Tracked as TROVE-2018-001 and CVE-2018-0490.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25074#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs