tor/src
David Goulet 8573d99470 hs: Fix an underflow in rend_service_intro_has_opened()
In rend_service_intro_has_opened(), this is subject to a possible underflow
because of how the if() casts the results. In the case where the expiring
nodes list length is bigger than the number of IP circuits, we end up in the
following situation where the result will be cast to an unsigned int. For
instance, "5 - 6" is actually a BIG number.

Ultimately leading to closing IP circuits in a non stop loop.

Partially fixes #21302.

Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-02-03 09:54:06 -05:00
..
common Merge branch 'combined-fuzzing-v4' 2017-01-30 08:40:46 -05:00
config Outbindbindaddress variants for Exit and OR. 2017-01-27 08:05:29 -05:00
ext Update to trunnel 1.5.1 2016-12-08 16:59:25 -05:00
or hs: Fix an underflow in rend_service_intro_has_opened() 2017-02-03 09:54:06 -05:00
test Fix a memory-leak in fuzz_vrs.c 2017-02-01 10:57:01 -05:00
tools Do not truncate too long hostnames 2017-01-25 13:13:25 -05:00
trunnel trunnel: Move ESTABLISH_INTRO cell sig_len after the end_sig_fields 2016-12-16 12:21:07 -05:00
win32 Bump to 0.3.0.2-alpha-dev 2017-01-23 14:38:10 -05:00
include.am Fuzzing: Add an initial fuzzing tool, for descriptors. 2016-12-19 15:34:55 -05:00