[tor-bugs] #20103 [Core Tor/Tor]: Crash on OpenBSD: tor invoked from Tor Browser 6.0.4

[Tor Bug Tracker & Wiki]

#20103: Crash on OpenBSD: tor invoked from Tor Browser 6.0.4
-----------------------------------------+---------------------------------
 Reporter:  attila                       |          Owner:
     Type:  defect                       |         Status:  new
 Priority:  High                         |      Milestone:  Tor:
                                         |  0.2.9.x-final
Component:  Core Tor/Tor                 |        Version:  Tor: 0.2.8.7
 Severity:  Normal                       |     Resolution:
 Keywords:  bug regression 028-backport  |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+---------------------------------

Comment (by rubiate):

 It was 0.2.8.7 until I added debugging statements so that's probably not
 helpful. The line is       "networkstatus_vote_free(current_md_consensus)"
 which is really on src/or/networkstatus.c:1651


 Here it is with proper line numbers. This is from the tor-0.2.8.7 tag, or
 "Tor v0.2.8.7 (git-263088633a63982a)".

 {{{
 freed by thread T0 here:
     #0 0x7f7f8ef24527 in __interceptor_free (/usr/lib/x86_64-linux-
 gnu/libasan.so.1+0x54527)
     #1 0x7f7f9054e9f9 in networkstatus_vote_free
 src/or/networkstatus.c:313
     #2 0x7f7f90556563 in networkstatus_set_current_consensus
 src/or/networkstatus.c:1651
     #3 0x7f7f907b568c in connection_dir_client_reached_eof
 src/or/directory.c:2009
     #4 0x7f7f907b9ee9 in connection_dir_reached_eof
 src/or/directory.c:2471
     #5 0x7f7f9075c9be in connection_reached_eof src/or/connection.c:4841
     #6 0x7f7f9075c9be in connection_handle_read_impl
 src/or/connection.c:3528
     #7 0x7f7f90537b67 in conn_read_callback src/or/main.c:803
     #8 0x7f7f8e77c3db in event_base_loop (/usr/lib/x86_64-linux-
 gnu/libevent-2.0.so.5+0x103db)
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20103#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online