[tor-bugs] #7947 [Tor]: Do handle TRUNCATE command properly if circuit pending still

[Tor Bug Tracker & Wiki]

#7947: Do handle TRUNCATE command properly if circuit pending still
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:                    
     Type:  defect       |         Status:  new               
 Priority:  normal       |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor          |        Version:                    
 Keywords:               |         Parent:                    
   Points:               |   Actualpoints:                    
-------------------------+--------------------------------------------------
 {{{
 --- relay.c.orig
 +++ relay.c
 @@ -1354,6 +1354,12 @@
                 "'truncate' unsupported at origin. Dropping.");
          return 0;
        }
 +      if (circ->n_hop) {
 +        extend_info_free(circ->n_hop);
 +        circ->n_hop = NULL;
 +        tor_free(circ->n_chan_create_cell);
 +        circuit_set_state(circ, CIRCUIT_STATE_OPEN);
 +      }
        if (circ->n_chan) {
          uint8_t trunc_reason = get_uint8(cell->payload +
 RELAY_HEADER_SIZE);
          circuit_clear_cell_queue(circ, circ->n_chan);
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7947>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online