[tor-bugs] #27284 [Core Tor/Tor]: Check IPv6 exit policies on microdescs

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Aug 23 13:02:38 UTC 2018


#27284: Check IPv6 exit policies on microdescs
------------------------------+--------------------------------
     Reporter:  teor          |      Owner:  teor
         Type:  defect        |     Status:  assigned
     Priority:  Medium        |  Milestone:  Tor: 0.3.5.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  034-backport-maybe
Actual Points:                |  Parent ID:  #27236
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+--------------------------------
 In node_exit_policy_rejects_all(), we check IPv4 and IPv6 policies on ri,
 but on md we only check IPv4:
 {{{
   else if (node->md)
     return node->md->exit_policy == NULL ||
       short_policy_is_reject_star(node->md->exit_policy);
 }}}

 One way to fix this issue is to refactor the existing code to check a new
 policy_is_reject_star, and then populate policy_is_reject_star when the md
 is parsed. (Like we already do with the ri.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27284>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list