#27206: rust protover_all_supported() takes forever on some inputs -------------------------------------------------+------------------------- Reporter: cyberpunks | Owner: (none) Type: defect | Status: | needs_review Priority: Medium | Milestone: Tor: | 0.3.5.x-final Component: Core Tor/Tor | Version: Severity: Normal | Resolution: Keywords: rust, protover, 033-backport, | Actual Points: 034-backport | Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+-------------------------
Comment (by teor): Oh, I thought we fixed all these DoS bugs in #24031 and #25250. And we added a 2^16^ limit for protocol expansion before rejecting the descriptor, vote, or consensus: https://github.com/torproject/tor/blob/master/src/rust/protover/protover.rs#L29 https://github.com/torproject/tor/blob/master/src/core/or/protover.c#L451 So I don't think this is security-low, just slightly inefficient. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27206#comment:3> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs