[tor-bugs] #18930 [Core Tor/Tor]: Segmentation fault: entry->parsed->intro_nodes

[Tor Bug Tracker & Wiki]

#18930: Segmentation fault: entry->parsed->intro_nodes
-------------------------------------------------+-------------------------
 Reporter:  juha                                 |          Owner:  andrea
     Type:  defect                               |         Status:
 Priority:  Medium                               |  needs_information
Component:  Core Tor/Tor                         |      Milestone:  Tor:
 Severity:  Normal                               |  0.2.8.x-final
 Keywords:  tor2web, crash, must-fix-            |        Version:  Tor:
  before-028-rc, TorCoreTeam201605               |  0.2.7.1-alpha
Parent ID:                                       |     Resolution:
 Reviewer:  dgoulet                              |  Actual Points:
                                                 |         Points:  1
                                                 |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by dgoulet):

 * cc: dgoulet (removed)
 * reviewer:   => dgoulet
 * status:  assigned => needs_information
 * severity:  Critical => Normal


Comment:

 We are still waiting on more information from juha here.

 The `i = 32767` value is super high... There is no chance we have that
 amount of usable intro points so probably that
 `entry->parsed->intro_nodes` has never been cleaned or a crazy amount of
 nodes have been added.

 {{{
   i = crypto_rand_int(smartlist_len(usable_nodes));
   intro = smartlist_get(usable_nodes, i);
 }}}

 Also this: `intro = 0x1` is simply not possible... So I think we don't
 have an accurate backtrace here.
 This tor version is not from the tor repository thus no way I can confirm
 anything... Putting this one in `needs_information`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18930#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online