[tor-bugs] #16849 [Core Tor/Tor]: clear_status_flags_on_sybil might want to clear more flags
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Mar 19 12:08:35 UTC 2018
#16849: clear_status_flags_on_sybil might want to clear more flags
-------------------------------------------------+-------------------------
Reporter: teor | Owner:
| ffmancera
Type: defect | Status:
| needs_review
Priority: High | Milestone: Tor:
| 0.3.4.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: easy, SponsorS-deferred, technical- | Actual Points:
debt, tor-dirauth, pending-disaster, review- |
group-32, review-group-34 |
Parent ID: | Points: small
Reviewer: nickm | Sponsor:
-------------------------------------------------+-------------------------
Comment (by nickm):
oh, I did find bugs!
* We should use memcpy() to copy the identity and descriptor digests:
strncpy will stop copying if those digests contain any 0-valued bytes.
* We should use strlcpy() and sizeof() to copy the nickname.
I think that we can have a somewhat safer approach. Hang on...
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16849#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list