Backport, Security bugfixes:

  When the user sends a NEWNYM signal, clear the client-side DNS
  cache too. Otherwise we continue to act on previous information.


svn:r8680

2 files changed, 5 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index d35e296fb4..1a13623d8a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -14,6 +14,10 @@ Changes in version 0.1.1.25 - 2006-10-?? [ongoing]
       tests when there's already one in progress -- unreachable
       servers were stacking up dozens of testing streams.
 
+  o Security bugfixes:
+    - When the user sends a NEWNYM signal, clear the client-side DNS
+      cache too. Otherwise we continue to act on previous information.
+
   o Minor bugfixes:
     - Avoid a memory corruption bug when creating a hash table for
       the first time.
diff --git a/src/or/main.c b/src/or/main.c
index 336de8b5a7..1185e3399f 100644
--- a/src/or/main.c
+++ b/src/or/main.c
@@ -1307,6 +1307,7 @@ signal_callback(int fd, short events, void *arg)
 #endif
     case SIGNEWNYM:
       circuit_expire_all_dirty_circs();
+      addressmap_clear_transient();
       break;
   }
 }