[tor-bugs] #19150 [Core Tor/Tor]: Pointer overflow in memarea_alloc()

[Tor Bug Tracker & Wiki]

#19150: Pointer overflow in memarea_alloc()
--------------------------------------------+------------------------------
 Reporter:  asn                             |          Owner:
     Type:  defect                          |         Status:
 Priority:  Medium                          |  needs_revision
Component:  Core Tor/Tor                    |      Milestone:  Tor:
 Severity:  Normal                          |  0.2.8.x-final
 Keywords:  TorCoreTeam201605 027-backport  |        Version:  Tor:
Parent ID:                                  |  0.2.1.10-alpha
 Reviewer:                                  |     Resolution:
                                            |  Actual Points:
                                            |         Points:
                                            |        Sponsor:
--------------------------------------------+------------------------------
Changes (by nickm):

 * keywords:  TorCoreTeam201605 => TorCoreTeam201605 027-backport
 * status:  new => needs_revision
 * milestone:  Tor: 0.2.9.x-final => Tor: 0.2.8.x-final


Comment:

 First attempt at a fix in `memarea_overflow_027`.  It probably isn't
 right.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19150#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online