Opened 11 years ago

Last modified 7 years ago

#880 closed defect (Fixed)

Parsing misuses -----END SIGNATURE----- tags

Reported by: nickm Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version: 0.2.0.31
Severity: Keywords:
Cc: nickm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Sometimes[*] in parsing dir-spec documents, we look for the tag -----BEGIN SIGNATURE----- or -----END SIGNATURE-----
to find the end of the document or the boundary between two documents. This is wrong. There is nothing stopping a
perfectly valid document from containing an internal entity with an attached tag of type SIGNATURE.

We have two options:

  • Change the spec so that signature objects are forbidden where not mandatory.
  • Change the implementation so entries with signature objects are tolerated.

[*] We definitely do this for certificates and may do it for other things too.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (3)

comment:1 Changed 11 years ago by nickm

Fixed. Only authority certs seem to have been affected.

comment:2 Changed 11 years ago by nickm

flyspray2trac: bug closed.

comment:3 Changed 7 years ago by nickm

Component: Tor ClientTor
Note: See TracTickets for help on using tickets.