[tor-bugs] #8976 [Tor]: rend_service_introduce() doesn't notice if the rendezvous point is on 127.0.0.1

[Tor Bug Tracker & Wiki]

#8976: rend_service_introduce() doesn't notice if the rendezvous point is on
127.0.0.1
----------------------+------------------------------------
 Reporter:  arma      |          Owner:
     Type:  defect    |         Status:  needs_review
 Priority:  Medium    |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor       |        Version:
 Severity:  Normal    |     Resolution:
 Keywords:  tor-hs    |  Actual Points:
Parent ID:  #17674    |         Points:
  Sponsor:  SponsorR  |
----------------------+------------------------------------

Comment (by arma):

 Replying to [comment:4 teor]:
 > ExtendAllowPrivateAddresses only prevents Tor clients and hidden
 services from sending extend cells with private addresses.
 >
 > Relays (and now RSOS) will still connect to a private address if they
 receive an extend cell or a rendezvous request from a badly behaved
 client. They might not send an extend request, but they do still connect.

 Really? Have you tested this? The code seems pretty clear that it
 shouldn't happen.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8976#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online