[tor-bugs] #20553 [Core Tor/Tor]: Memory leak in crypto_write_public_key_to_string() with OpenSSL master

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Nov 3 17:58:53 UTC 2016


#20553: Memory leak in crypto_write_public_key_to_string() with OpenSSL master
---------------------------------------+-----------------------------------
 Reporter:  nickm                      |          Owner:
     Type:  defect                     |         Status:  merge_ready
 Priority:  Medium                     |      Milestone:  Tor:
                                       |  0.2.9.x-final
Component:  Core Tor/Tor               |        Version:
 Severity:  Normal                     |     Resolution:
 Keywords:  029-backport 028-backport  |  Actual Points:
Parent ID:                             |         Points:
 Reviewer:                             |        Sponsor:
---------------------------------------+-----------------------------------
Changes (by dgoulet):

 * status:  needs_review => merge_ready


Comment:

 lgtm; Seems worth it for backport as memleaks can be a source of DoS, that
 falls well under our policy of backporting security bugs for stable 028.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20553#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list