-
- Downloads
TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell
On an hidden service rendezvous circuit, a BEGIN_DIR could be sent (maliciously) which would trigger a tor_assert() because connection_edge_process_relay_cell() thought that the circuit is an or_circuit_t but is an origin circuit in reality. Fixes #22494 Reported-by:Roger Dingledine <arma@torproject.org> Signed-off-by:
David Goulet <dgoulet@torproject.org>
Loading
Please register or sign in to comment