[tor-bugs] #15618 [Tor]: Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)

[Tor Bug Tracker & Wiki]

#15618: Tried to establish rendezvous on non-OR circuit with purpose Acting as
rendevous (pending)
------------------------+--------------------------------
     Reporter:  asn     |      Owner:
         Type:  defect  |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  tor-hs SponsorR
Actual Points:          |  Parent ID:
       Points:          |
------------------------+--------------------------------

Comment (by asn):

 Looking at the code, clients send `ESTABLISH_RENDEZVOUS` cells in
 `rend_client_send_establish_rendezvous()` through
 `rend_client_rendcirc_has_opened()` which is calle only in
 `circuit_has_opened()`. Hence, from first glance there doesn't seem to be
 some sort of relaunch mechanism that would establish two rendezvous in the
 same circuit.

 Next step is to check if this can happen through cannibalization or
 something. Otherwise, it does seem like a misbehaving Tor client.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15618#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online