Opened 6 years ago

Closed 6 years ago

Last modified 5 years ago

#3888 closed defect (fixed)

valgrind: Invalid read of size 4 in ev_token_bucket_update()

Reported by: Sebastian Owned by:
Priority: Medium Milestone: Tor: 0.2.3.x-final
Component: Core Tor/Tor Version:
Severity: Keywords: tor-relay
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

From fluxe3's valgrind:

Invalid read of size 4
   at 0x813C865: ev_token_bucket_update (bufferevent_ratelim.c:96)
   by 0x813CF8E: _bufferevent_get_write_max (bufferevent_ratelim.c:122)
   by 0x813B2AF: bufferevent_writecb (bufferevent_sock.c:255)
   by 0x813332D: event_process_active_single_queue (event.c:1360)
   by 0x8133D90: event_base_loop (event.c:1459)
   by 0x804C7F8: do_main_loop (main.c:1814)
   by 0x804CB1C: tor_main (main.c:2489)
   by 0x804B35A: main (tor_main.c:30)
 Address 0x9e6edfc is 4 bytes inside a block of size 28 free'd
   at 0x4023B6A: free (vg_replace_malloc.c:366)
   by 0x80C18A1: _connection_free (connection.c:526)
   by 0x804EB17: connection_unlink (main.c:370)
   by 0x804ED5E: close_closeable_connections (main.c:848)
   by 0x813332D: event_process_active_single_queue (event.c:1360)
   by 0x8133D90: event_base_loop (event.c:1459)
   by 0x804C7F8: do_main_loop (main.c:1814)
   by 0x804CB1C: tor_main (main.c:2489)
   by 0x804B35A: main (tor_main.c:30)

Child Tickets

Change History (5)

comment:1 Changed 6 years ago by Sebastian

Status: newneeds_review

Branch bug3888 in my repository.

comment:2 Changed 6 years ago by nickm

looks good; needs a changes file.

comment:3 Changed 6 years ago by nickm

Resolution: fixed
Status: needs_reviewclosed

Added one; merging.

comment:4 Changed 5 years ago by nickm

Keywords: tor-relay added

comment:5 Changed 5 years ago by nickm

Component: Tor RelayTor
Note: See TracTickets for help on using tickets.