Opened 6 years ago

Closed 5 years ago

#4627 closed defect (wontfix)

TorCtl doesn't handle quoted passwords

Reported by: atagar Owned by:
Priority: Very Low Milestone:
Component: Torctl Version:
Severity: Keywords: easy
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The TorCtl authenticate_password passes the password directly to the control socket without escaping quotes. For more information see...
https://trac.torproject.org/projects/tor/ticket/4600

Fixing this should be as simple as uncommenting the hex translation or doing...
secret = secret.replace('"', '
"')

Child Tickets

Change History (1)

comment:1 Changed 5 years ago by atagar

Resolution: wontfix
Status: newclosed

Not important to TorFlow. Resolving.

Note: See TracTickets for help on using tickets.