[tor-bugs] #2954 [Tor Directory Authority]: Weird dirauth microdesc malloc failures, warns, ooms, exploit attempts?

[Tor Bug Tracker & Wiki]

#2954: Weird dirauth microdesc malloc failures, warns, ooms, exploit attempts?
----------------------------------------+-----------------------------------
    Reporter:  mikeperry                |       Owner:  mikeperry
        Type:  defect                   |      Status:  closed   
    Priority:  critical                 |   Milestone:           
   Component:  Tor Directory Authority  |     Version:           
  Resolution:  fixed                    |    Keywords:           
      Parent:                           |      Points:  2        
Actualpoints:  2                        |  
----------------------------------------+-----------------------------------

Comment(by mikeperry):

 FYI: Here were the log lines:


 Apr 09 07:33:59.585 [warn] Unparseable microdescriptor
 Apr 09 07:33:59.905 [warn] parse error: Malformed object: mismatched end
 tag RSA PUBLIC KEY
 Apr 09 07:33:59.585 [warn] parse error: Malformed object: missing object
 end line
 Apr 09 07:33:59.585 [warn] Unparseable microdescriptor
 Apr 09 07:33:59.905 [warn] parse error: Malformed object: mismatched end
 tag RSA PUBLIC KEY
 Apr 09 07:33:59.905 [warn] Unparseable microdescriptor
 Apr 09 07:34:00.143 [warn] parse error: Malformed object: missing object
 end line
 Apr 09 07:34:00.143 [warn] Unparseable microdescriptor
 Apr 09 07:34:05.296 [err] Out of memory on realloc(). Dying.

 Apr 09 09:25:57.799 [warn] Unparseable microdescriptor
 Apr 09 09:25:57.799 [warn] crypto error while reading public key from
 string: malloc failure (in bignum routines:BN_EXPAND_INTERNAL)
 Apr 09 09:25:57.799 [warn] crypto error while reading public key from
 string: nested asn1 error (in asn1 encoding
 routines:ASN1_TEMPLATE_NOEXP_D2I)
 Apr 09 09:25:57.799 [warn] crypto error while reading public key from
 string: ASN1 lib (in PEM routines:PEM_ASN1_read_bio)
 Apr 09 09:25:57.799 [warn] parse error: Couldn't parse public key.
 Apr 09 09:25:57.799 [warn] Unparseable microdescriptor

 Apr 09 10:41:06.278 [warn] parse error: Malformed object: missing object
 end line
 Apr 09 10:41:06.279 [warn] Unparseable microdescriptor: @last-listed
 2010-02-04 01:50:01
 Apr 09 10:41:07.486 [warn] parse error: Malformed object: missing object
 end line
 Apr 09 10:41:07.486 [warn] Unparseable microdescriptor: @last-listed
 2010-02-06 05:50:01
 Apr 09 10:41:09.900 [warn] parse error: Malformed object: missing object
 end line

 The microdesc code apparently does not log anything below warn, nor does
 it log unparseable descriptors. Inspecting the microdesc cache revealed
 that several microdescs appeared to be just running into the next without
 proper termination, perhaps a side effect of earlier crashes/ooms.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2954#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online