[tor-bugs] #14815 [Tor]: use-after-free in cpuworker_onion_handshake_replyfn()

[Tor Bug Tracker & Wiki]

#14815: use-after-free in cpuworker_onion_handshake_replyfn()
------------------------+--------------------------------
     Reporter:  arma    |      Owner:
         Type:  defect  |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------------------
Changes (by arma):

 * cc: nickm, dgoulet (added)


Comment:

 Looks related to #9682. Also looks complicated to debug -- am cc'ing two
 people who know that new code more.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14815#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online