[tor-bugs] #8788 [Tor]: We can crash on a bad resolv.conf file
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Apr 28 01:14:09 UTC 2013
#8788: We can crash on a bad resolv.conf file
-----------------------+----------------------------------------------------
Reporter: nickm | Owner:
Type: defect | Status: new
Priority: minor | Milestone: Tor: 0.2.5.x-final
Component: Tor | Version:
Keywords: tor-relay | Parent:
Points: | Actualpoints:
-----------------------+----------------------------------------------------
When we use NEXT_TOKEN in resolv_conf_parse_line, we unconditionally call
evdns_nameserver_ip_add() on the result, when it might be NULL.
resolv.conf isn't adversary-controlled, so this isn't a huge deal, but we
should fix it. Libevent should get this fix too.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8788>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list