use-after-free in validate_intro_point_failure
In validate_intro_point_failure(), we look at identity
after freeing intro
. But identity
is a reference into intro
, so we shouldn't free intro
till we're done with it.
In validate_intro_point_failure(), we look at identity
after freeing intro
. But identity
is a reference into intro
, so we shouldn't free intro
till we're done with it.
changed milestone to %Tor: 0.2.7.x-final in legacy/trac
added 2016-bug-retrospective in Legacy / Trac component::core tor/tor in Legacy / Trac milestone::Tor: 0.2.7.x-final in Legacy / Trac priority::very high in Legacy / Trac resolution::fixed in Legacy / Trac severity::major in Legacy / Trac status::closed in Legacy / Trac type::defect in Legacy / Trac labels
5b207019 fixes this one.
Trac:
Resolution: N/A to fixed
Status: new to closed
Marking these tickets (based on severity and hand-review) for inclusion in 2016 bug retrospective
Trac:
Keywords: N/A deleted, 2016-bug-retrospective added
Mark more tickets for bug retrospective based on hand-review of changelogs from 0.2.5 onwards.
closed
moved from legacy/trac#17401 (moved)
removed 1 deleted label