#23082: tor_addr_parse is overly permissive --------------------------+------------------------------------ Reporter: dcf | Owner: Type: defect | Status: new Priority: Medium | Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor | Version: Tor: 0.3.1.5-alpha Severity: Normal | Resolution: Keywords: | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: --------------------------+------------------------------------
Comment (by dcf): Here is a fuzzer for tor_addr_parse: attachment:fuzz_addr.c. I ran it and didn't find any other unexpected inputs accepted by tor_addr_parse: attachment:fuzz_addr_findings.tar.gz {{{ $ for a in fuzz_addr_findings/queue/*; do ./fuzz-addr --info < $a; done | grep -v error }}} -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23082#comment:3> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs