diff options
| author | Nick Mathewson <nickm@torproject.org> | 2017-11-30 12:07:59 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2017-11-30 12:07:59 -0500 |
| commit | ee48eb1eb5e643cd8af2a32df3cf8c48965f6ce4 (patch) | |
| tree | 077e709933fe62c7e00c8e46702e7c48deff7398 /src/or/rendservice.c | |
| parent | 500f04a74e22686f7659adecea02569b3459c71b (diff) | |
| parent | 5fc0587c040339357bc3fc37f1b5474f1c3d1a33 (diff) | |
| download | tor-ee48eb1eb5e643cd8af2a32df3cf8c48965f6ce4.tar.gz tor-ee48eb1eb5e643cd8af2a32df3cf8c48965f6ce4.zip | |
Merge branch 'maint-0.3.0' into maint-0.3.1
Diffstat (limited to 'src/or/rendservice.c')
| -rw-r--r-- | src/or/rendservice.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 2d3a15ab23..b2427342da 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1946,6 +1946,7 @@ rend_service_receive_introduction(origin_circuit_t *circuit, time_t now = time(NULL); time_t elapsed; int replay; + size_t keylen; /* Do some initial validation and logging before we parse the cell */ if (circuit->base_.purpose != CIRCUIT_PURPOSE_S_INTRO) { @@ -2020,9 +2021,10 @@ rend_service_receive_introduction(origin_circuit_t *circuit, } /* check for replay of PK-encrypted portion. */ + keylen = crypto_pk_keysize(intro_key); replay = replaycache_add_test_and_elapsed( intro_point->accepted_intro_rsa_parts, - parsed_req->ciphertext, parsed_req->ciphertext_len, + parsed_req->ciphertext, MIN(parsed_req->ciphertext_len, keylen), &elapsed); if (replay) { @@ -4051,6 +4053,10 @@ remove_invalid_intro_points(rend_service_t *service, log_info(LD_REND, "Expiring %s as intro point for %s.", safe_str_client(extend_info_describe(intro->extend_info)), safe_str_client(service->service_id)); + /* We might have put it in the retry list if so, undo. */ + if (retry_nodes) { + smartlist_remove(retry_nodes, intro); + } smartlist_add(service->expiring_nodes, intro); SMARTLIST_DEL_CURRENT(service->intro_nodes, intro); /* Intro point is expired, we need a new one thus don't consider it |