[tor-bugs] #20247 [Core Tor/Tor]: crash after closing and opening ipv6 DirPort + OrPort

[Tor Bug Tracker & Wiki]

#20247: crash after closing and opening ipv6 DirPort + OrPort
-------------------------------------------------+-------------------------
 Reporter:  toralf                               |          Owner:
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.0.x-final
Component:  Core Tor/Tor                         |        Version:  Tor:
                                                 |  0.2.8.8
 Severity:  Normal                               |     Resolution:
 Keywords:  crash 028-backport ipv6 nickm-       |  Actual Points:
  deferred-20161017                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by yawning):

 Replying to [comment:8 teor]:
 > Ok, it's not a capability issue, it's a sandbox issue. Someone who
 understands how the Linux sandbox allows IP addresses / ports needs to fix
 this and test it.

 This function:
 https://gitweb.torproject.org/tor.git/tree/src/common/sandbox.c#n682

 Add the appropriate rules to allow this one: `setsockopt(s,IPPROTO_IPV6,
 IPV6_V6ONLY

 > Or maybe the reality is that you can only bind to IPv6 addresses on
 startup (right after the sandbox is configured as root) with the sandbox
 active, and we need to document that.

 That's how it is right now, without the changes.  But that's terrible, so
 there should be changes.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20247#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online