[tor-bugs] #3888 [Tor Relay]: valgrind: Invalid read of size 4 in ev_token_bucket_update()

[Tor Bug Tracker & Wiki]

#3888: valgrind: Invalid read of size 4 in ev_token_bucket_update()
-----------------------+----------------------------------------------------
 Reporter:  Sebastian  |          Owner:                    
     Type:  defect     |         Status:  new               
 Priority:  normal     |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Relay  |        Version:                    
 Keywords:             |         Parent:                    
   Points:             |   Actualpoints:                    
-----------------------+----------------------------------------------------
 From fluxe3's valgrind:

 {{{
 Invalid read of size 4
    at 0x813C865: ev_token_bucket_update (bufferevent_ratelim.c:96)
    by 0x813CF8E: _bufferevent_get_write_max (bufferevent_ratelim.c:122)
    by 0x813B2AF: bufferevent_writecb (bufferevent_sock.c:255)
    by 0x813332D: event_process_active_single_queue (event.c:1360)
    by 0x8133D90: event_base_loop (event.c:1459)
    by 0x804C7F8: do_main_loop (main.c:1814)
    by 0x804CB1C: tor_main (main.c:2489)
    by 0x804B35A: main (tor_main.c:30)
  Address 0x9e6edfc is 4 bytes inside a block of size 28 free'd
    at 0x4023B6A: free (vg_replace_malloc.c:366)
    by 0x80C18A1: _connection_free (connection.c:526)
    by 0x804EB17: connection_unlink (main.c:370)
    by 0x804ED5E: close_closeable_connections (main.c:848)
    by 0x813332D: event_process_active_single_queue (event.c:1360)
    by 0x8133D90: event_base_loop (event.c:1459)
    by 0x804C7F8: do_main_loop (main.c:1814)
    by 0x804CB1C: tor_main (main.c:2489)
    by 0x804B35A: main (tor_main.c:30)
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3888>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online