Prechádzať zdrojové kódy

Disable middle relay queue overfill detection code due to possible guard discovery attack

Andrea Shepard 11 rokov pred
rodič
commit
2a95f31716
2 zmenil súbory, kde vykonal 8 pridanie a 0 odobranie
  1. 3 0
      changes/bug9072
  2. 5 0
      src/or/relay.c

+ 3 - 0
changes/bug9072

@@ -0,0 +1,3 @@
+  o Critical bugfixes:
+    - Disable middle relay queue overfill detection code due to possible
+      guard discovery attack, pending further analysis.  Fixes bug #9072.

+ 5 - 0
src/or/relay.c

@@ -2548,6 +2548,10 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn,
     streams_blocked = circ->streams_blocked_on_p_conn;
   }
 
+  /*
+   * Disabling this for now because of a possible guard discovery attack
+   */
+#if 0
   /* Are we a middle circuit about to exceed ORCIRC_MAX_MIDDLE_CELLS? */
   if ((circ->n_conn != NULL) && CIRCUIT_IS_ORCIRC(circ)) {
     orcirc = TO_OR_CIRCUIT(circ);
@@ -2566,6 +2570,7 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn,
       }
     }
   }
+#endif
 
   cell_queue_append_packed_copy(queue, cell);