[tor-bugs] #12191 [Tor]: command_process_create_cell: calls channel_send_destroy() for already exist circuit

[Tor Bug Tracker & Wiki]

#12191: command_process_create_cell: calls channel_send_destroy() for already exist
circuit
-----------------------------+-----------------------------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:  Tor: 0.2.5.x-final
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:  tor-relay 025-triaged
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------------------

Comment (by nickm):

 There's a corner-case here: what to do if we get a CREATE cell for a
 circuit on which we have a pending DESTROY.

 (I don't think that should be possible in correct operation, since if we
 have a pending DESTROY to send towards the client, we have not yet
 processed a DESTROY from the client, and so the client should still
 believe the circuit is there and not send us a CREATE cell for it.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12191#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online