[tor-bugs] #27896 [Core Tor/Tor]: base32 padding inconsistency between client and server in HS v3 client auth preview
    Tor Bug Tracker & Wiki 
    blackhole at torproject.org
       
    Sat Oct 20 15:11:38 UTC 2018
    
    
  
#27896: base32 padding inconsistency between client and server in HS v3 client auth
preview
-----------------------------+------------------------------------
 Reporter:  jchevali         |          Owner:  (none)
     Type:  defect           |         Status:  needs_information
 Priority:  Medium           |      Milestone:  Tor: unspecified
Component:  Core Tor/Tor     |        Version:  Tor: 0.3.5.1-alpha
 Severity:  Normal           |     Resolution:
 Keywords:  tor-hs, hs-auth  |  Actual Points:
Parent ID:                   |         Points:
 Reviewer:                   |        Sponsor:
-----------------------------+------------------------------------
Comment (by jchevali):
 Perhaps you'd like to deal with the assertion failed issue in the ticket
 that pege's opened, #28129 (although that same stack trace was presented
 here earlier), and leave this ticket for the other issues, namely, how
 should we investigate invalid descriptors (by the server that doesn't
 crash -- i.e., if given its characteristics, e.g., no GCC, no IPv4, etc.,
 you still deem it worthy of testing), and whether padded content should be
 allowed (after all under the base32 definition I believe it's legal), and
 whether padded entries or otherwise invalid entries (except comments)
 should, when they're not among otherwise valid entries, result in an
 unsecured service or a secured (closed) one.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27896#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list