Opened 11 years ago

Last modified 7 years ago

#889 closed defect (Fixed)

Race condition when freeing RSA keys.

Reported by: nickm Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version: 0.2.0.31
Severity: Keywords:
Cc: nickm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

There is no lock protecting the refcnt field of crypto_pk_env_t; this can cause keys to not get freed from within
cpuworker.c, or worse.

There are two ways to fix this: add a lock to each key that needs to be held when the key is modified, or add a
function to make a real honest-to-god copy of the key if we're going to be messing with the key's reference count
in two threads at once.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (3)

comment:1 Changed 11 years ago by nickm

Fixed in r17672.

comment:2 Changed 11 years ago by nickm

flyspray2trac: bug closed.

comment:3 Changed 7 years ago by nickm

Component: Tor RelayTor
Note: See TracTickets for help on using tickets.