Commit 2a95f317 authored by Andrea Shepard's avatar Andrea Shepard
Browse files

Disable middle relay queue overfill detection code due to possible guard discovery attack

parent d780cd5f

changes/bug9072

0 → 100644
+3 −0
Original line number Diff line number Diff line 
  o Critical bugfixes:

    - Disable middle relay queue overfill detection code due to possible

      guard discovery attack, pending further analysis.  Fixes bug #9072.

src/or/relay.c

+5 −0
Original line number Diff line number Diff line
@@ -2548,6 +2548,10 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn, 
    streams_blocked = circ->streams_blocked_on_p_conn;

  }



  /*

   * Disabling this for now because of a possible guard discovery attack

   */

#if 0

  /* Are we a middle circuit about to exceed ORCIRC_MAX_MIDDLE_CELLS? */

  if ((circ->n_conn != NULL) && CIRCUIT_IS_ORCIRC(circ)) {

    orcirc = TO_OR_CIRCUIT(circ);
@@ -2566,6 +2570,7 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn, 
      }

    }

  }

#endif



  cell_queue_append_packed_copy(queue, cell);