Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-06-08 | TROVE-2017-005: Fix assertion failure in connection_edge_process_relay_cell | David Goulet | |
On an hidden service rendezvous circuit, a BEGIN_DIR could be sent (maliciously) which would trigger a tor_assert() because connection_edge_process_relay_cell() thought that the circuit is an or_circuit_t but is an origin circuit in reality. Fixes #22494 Reported-by: Roger Dingledine <arma@torproject.org> Signed-off-by: David Goulet <dgoulet@torproject.org> |