1

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?

  • Dear Iyn roj, would you elabarate on your question? Give some background information, help us to fully comprehend your question. – Roya Jun 10 '14 at 10:19
  • 1
    I think he means the function OPENSSL_indirect_call removed by OpenBSD developers: freshbsd.org/commit/openbsd/… This function allows to jump to arbitrary memory locations and some people argue it was put there deliberately to increase the attack surface on OpenSSL teksyndicate.com/forum/inboxexe/open-ssl-andy-polyakov-spy/… As far as I can see the code is still in 1.0.1f – sroecker Jun 10 '14 at 21:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.