Opened 10 months ago

Closed 8 months ago

Last modified 8 months ago

#28558 closed defect (fixed)

Crash in memoize_protover_summary() when cache is full

Reported by: nickm Owned by: nickm
Priority: Very High Milestone: Tor: 0.4.0.x-final
Component: Core Tor/Tor Version:
Severity: Normal Keywords:
Cc: Actual Points: .1
Parent ID: Points:
Reviewer: Sponsor: Sponsor8

Description

In memoize_protover_summary(), after we call protover_summary_cache_free_all(), we need to re-create protover_summary_map. Otherwise we'll hit an assertion.

Found by OSS-Fuzz; not in any released version.

Child Tickets

Change History (4)

comment:1 Changed 10 months ago by nickm

Should be fixed by 469f47ef8dc8b18104108f0437c860ec88fca6ad

comment:2 Changed 10 months ago by nickm

Actual Points: .1

comment:3 Changed 8 months ago by gaba

Resolution: fixed
Status: assignedclosed

This should be close, right?

comment:4 Changed 8 months ago by nickm

Yes, that's right. Thanks!

Note: See TracTickets for help on using tickets.