[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #4529 [Tor Client]: tor_dup_addr(): buf[] uninited for some cases

#4529: tor_dup_addr(): buf[] uninited for some cases
------------------------+---------------------------------------------------
 Reporter:  troll_un    |          Owner:     
     Type:  defect      |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Tor Client  |        Version:     
 Keywords:              |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------
 If tor_dup_addr() called with addr's family another than AF_INET or
 AF_INET6 then call to tor_addr_to_str() leaves buf[] uninited. Calling
 tor_strdup(buf) with uninited array leads to duping trash with random
 length or segfault (if no zero bytes)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4529>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs