summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2012-08-15 13:16:41 -0400
committerNick Mathewson <nickm@torproject.org>2012-08-15 13:16:41 -0400
commitcdd882ee71fb2966854fe271d9896b7bf389b35c (patch)
tree837a01b666738c9794dd00541488a812b5ae0c03 /changes
parentc9d3e09cf8d7fb5e2ed1e9f7bb5e37a1a1319792 (diff)
downloadtor-cdd882ee71fb2966854fe271d9896b7bf389b35c.tar.gz
tor-cdd882ee71fb2966854fe271d9896b7bf389b35c.zip
Check for stream_id, not conn, on extend cells.
Extend cells aren't allowed to have a stream_id, but we were only blocking them when they had a stream_id that corresponded to a connection. As far as I can tell, this change is harmless: it will make some kinds of broken clients not work any more, but afaik nobody actually make a client that was broken in that way. Found while hunting for other places where we made the same mistake as in 6271. Bugfix on d7f50337c14c back from May 2003, which introduced telescoping circuit construction into 0.0.2pre8.
Diffstat (limited to 'changes')
-rw-r--r--changes/bug6271-related6
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug6271-related b/changes/bug6271-related
new file mode 100644
index 0000000000..78e53c8887
--- /dev/null
+++ b/changes/bug6271-related
@@ -0,0 +1,6 @@
+ o Minor bugfixes (spec conformance):
+ - Reject EXTEND cells sent to nonexistent streams. According to the
+ spec, an EXTEND cell sent to _any_ nonzero stream ID is invalid, but
+ we were only checking for stream IDs that were currenty in use.
+ Found while hunting for more instances of bug 6271. Bugfix on
+ 0.0.2pre8, which introduced incremental circuit construction.