[tor-bugs] #26007 [Core Tor/Tor]: Stop logging stack contents when reading a zero-length bandwidth file
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed May 2 12:27:21 UTC 2018
#26007: Stop logging stack contents when reading a zero-length bandwidth file
-------------------------+-------------------------------------------------
Reporter: teor | Owner: teor
Type: defect | Status: assigned
Priority: Medium | Milestone: Tor: 0.3.3.x-final
Component: Core | Version: Tor: 0.2.2.1-alpha
Tor/Tor | Keywords: 033-must-maybe security-low
Severity: Normal | 032-backport 031-backport 029-backport fast-fix
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------+-------------------------------------------------
When reading a zero-length bandwidth file, Tor directory authorities read
an uninitialised buffer and log it at warning level.
There is no guarantee that the buffer contains a NUL byte.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26007>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list