Commit f3fdbadf authored by Roger Dingledine's avatar Roger Dingledine
Browse files

randomize the initial circ_id and stream_id, so an adversary who 

breaks in part-way through can't learn how many circs/streams have
been made


svn:r960
parent 71739b48

src/or/circuit.c

+2 −0
Original line number Diff line number Diff line
@@ -75,6 +75,8 @@ circuit_t *circuit_new(uint16_t p_circ_id, connection_t *p_conn) { 
  circ->package_window = CIRCWINDOW_START;

  circ->deliver_window = CIRCWINDOW_START;



  circ->next_stream_id = crypto_pseudo_rand_int(1<<16);



  circuit_add(circ);



  return circ;

src/or/connection.c

+2 −0
Original line number Diff line number Diff line
@@ -88,6 +88,8 @@ connection_t *connection_new(int type) { 
    conn->socks_request = tor_malloc_zero(sizeof(socks_request_t));

  }



  conn->next_circ_id = crypto_pseudo_rand_int(1<<15);



  conn->timestamp_created = now;

  conn->timestamp_lastread = now;

  conn->timestamp_lastwritten = now;