If tor_dup_addr() called with addr's family another than AF_INET or AF_INET6 then call to tor_addr_to_str() leaves buf[] uninited. Calling tor_strdup(buf) with uninited array leads to duping trash with random length or segfault (if no zero bytes) **Trac**: **Username**: troll_un