[tor-bugs] #13202 [Tor]: Figure out a way to deal with bridges missing arguments.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sat Sep 20 16:17:47 UTC 2014
#13202: Figure out a way to deal with bridges missing arguments.
---------------------+----------------------------------
Reporter: yawning | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor | Version: Tor: unspecified
Keywords: | Actual Points:
Parent ID: | Points:
---------------------+----------------------------------
From IRC, apparently approximately one in seven ScrambleSuit bridges do
not have a password on the bridge line.
I am 99% certain this is due to people running ScrambleSuit on
tor-0.2.4.x, as passing pluggable transport arguments via the extrainfo
document is not supported in that version, and
`transports.c:parse_smethod_line()` does not sufficiently validate the
`SMETHOD` line, so the arguments are silently dropped.
This leads to Bridges that publish extrainfo documents containing Bridge
lines that are totally useless (No ScrambleSuit password etc), and will
never get used.
This may be something that has to be worked around on the BridgeDB side
(teach it about transports that require arguments, ignore bridges with
malformed bridge lines), but that seems suboptimal (people thinking they
are contributing bridges, when they realistically are not).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13202>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list