diff options
| author | Nick Mathewson <nickm@torproject.org> | 2017-09-29 10:28:33 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2017-09-29 10:28:33 -0400 |
| commit | 8ccefa7b7afac9626a9e448c0cc4694f5fa51097 (patch) | |
| tree | 77faea60f3b34e9357fc101d66fe08562ee1ce0e | |
| parent | 4e6374c26b909027bd90ad722902205e5eaa13f4 (diff) | |
| parent | f7222e6d8cf31ce0e2a4653477ab42645c045db6 (diff) | |
| download | tor-8ccefa7b7afac9626a9e448c0cc4694f5fa51097.tar.gz tor-8ccefa7b7afac9626a9e448c0cc4694f5fa51097.zip | |
Merge branch 'bug23690_028'
| -rw-r--r-- | changes/bug23690 | 5 | ||||
| -rw-r--r-- | src/or/circuitlist.c | 1 |
2 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug23690 b/changes/bug23690 new file mode 100644 index 0000000000..36ff32e499 --- /dev/null +++ b/changes/bug23690 @@ -0,0 +1,5 @@ + o Major bugfixes (relay, crash, assertion failure): + - Fix a timing-based assertion failure that could occur when the + circuit out-of-memory handler freed a connection's output buffer. + Fixes bug 23690; bugfix on 0.2.6.1-alpha. + diff --git a/src/or/circuitlist.c b/src/or/circuitlist.c index 65fcdaaddb..d37d986f17 100644 --- a/src/or/circuitlist.c +++ b/src/or/circuitlist.c @@ -2122,6 +2122,7 @@ single_conn_free_bytes(connection_t *conn) if (conn->outbuf) { result += buf_allocation(conn->outbuf); buf_clear(conn->outbuf); + conn->outbuf_flushlen = 0; } if (conn->type == CONN_TYPE_DIR) { dir_connection_t *dir_conn = TO_DIR_CONN(conn); |