Re: [tor-bugs] #12848 [Tor]: Tor wrongly process circuit as connected to n_chan if create cell delivery failed

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#12848: Tor wrongly process circuit as connected to n_chan if create cell delivery
failed
-----------------------------+--------------------------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor          |    Version:  Tor: 0.2.5.5-alpha
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------------

Comment (by cypherpunks):

 This bug can to explain huge number of num_n_circuits reported in #12184.
 channel_send_destroy inserts pair of chan,id to conn-circid map with zero
 id, then circuit_set_n_circid_chan() removes it and decrements number of
 (old_chan->num_n_circuits). Depends number of real circuits and failed
 extend requests it will underflow num_n_circuits.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12848#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs