Skip to content
Commit 56a7c5bc authored by David Goulet's avatar David Goulet 🐼 Committed by Nick Mathewson
Browse files

TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell

On an hidden service rendezvous circuit, a BEGIN_DIR could be sent
(maliciously) which would trigger a tor_assert() because
connection_edge_process_relay_cell() thought that the circuit is an
or_circuit_t but is an origin circuit in reality.

Fixes #22494



Reported-by: default avatarRoger Dingledine <arma@torproject.org>
Signed-off-by: David Goulet's avatarDavid Goulet <dgoulet@torproject.org>
parent 4ee48cb4
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment