[tor-bugs] #24247 [Core Tor/Tor]: Fuzzing: check_signature mock can be fooled by a really short key.

[Tor Bug Tracker & Wiki]

#24247: Fuzzing: check_signature mock can be fooled by a really short key.
--------------------------+------------------------------------
 Reporter:  nickm         |          Owner:  nickm
     Type:  defect        |         Status:  assigned
 Priority:  Medium        |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------
Description changed by nickm:

Old description:

> Our mock function, mock_crypto_pk_public_checksig__nocheck, fails to
> behave properly when it gets a ridiculously short key: the caller will
> have allocated a small amount, but we'll write a 20-byte digest.
>
> This is causing a false positive on OSS-Fuzz.

New description:

 Our mock function, `mock_crypto_pk_public_checksig__nocheck`, fails to
 behave properly when it gets a ridiculously short key: the caller will
 have allocated a small amount, but we'll write a 20-byte digest.

 This is causing a false positive on OSS-Fuzz.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24247#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online