[tor-bugs] #16849 [Core Tor/Tor]: clear_status_flags_on_sybil might want to clear more flags

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Mar 19 12:08:35 UTC 2018


#16849: clear_status_flags_on_sybil might want to clear more flags
-------------------------------------------------+-------------------------
 Reporter:  teor                                 |          Owner:
                                                 |  ffmancera
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  0.3.4.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  easy, SponsorS-deferred, technical-  |  Actual Points:
  debt, tor-dirauth, pending-disaster, review-   |
  group-32, review-group-34                      |
Parent ID:                                       |         Points:  small
 Reviewer:  nickm                                |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by nickm):

 oh, I did find bugs!

   * We should use memcpy() to copy the identity and descriptor digests:
 strncpy will stop copying if those digests contain any 0-valued bytes.
   * We should use strlcpy() and sizeof() to copy the nickname.

 I think that we can have a somewhat safer approach.  Hang on...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16849#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list