Please sign in to comment.
TROVE-2017-004: Fix assertion failure in relay_send_end_cell_from_edge_
This fixes an assertion failure in relay_send_end_cell_from_edge_() when an origin circuit and a cpath_layer = NULL were passed. A service rendezvous circuit could do such a thing when a malformed BEGIN cell is received but shouldn't in the first place because the service needs to send an END cell on the circuit for which it can not do without a cpath_layer. Fixes #22493 Reported-by: Roger Dingledine <firstname.lastname@example.org> Signed-off-by: David Goulet <email@example.com>
- Loading branch information...
Showing with 19 additions and 7 deletions.
|@@ -0,0 +1,5 @@|
|o Major bugfixes (hidden service, relay):|
|- Fix an assertion failure when an hidden service handles a malformed|
|BEGIN cell. This bug resulted in the service crashing triggered by a|
|tor_assert(). Part of TROVE-2017-004. Fixes bug 22493; bugfix on|
|tor-0.3.0.1-alpha. Found by armadev.|