[tor-bugs] #25226 [Core Tor/Tor]: Circuit cell queue can fill up memory

[Tor Bug Tracker & Wiki]

#25226: Circuit cell queue can fill up memory
------------------------------------------+--------------------------------
 Reporter:  dgoulet                       |          Owner:  dgoulet
     Type:  defect                        |         Status:  accepted
 Priority:  Medium                        |      Milestone:  Tor:
                                          |  0.3.3.x-final
Component:  Core Tor/Tor                  |        Version:
 Severity:  Normal                        |     Resolution:
 Keywords:  tor-cell, tor-relay, tor-dos  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:
------------------------------------------+--------------------------------

Comment (by dgoulet):

 Per a discussion with armadev on IRC, this situation is unfortunately
 possible and the only defense we have in place is the OOM handler.

 We should thought of having a upper limit on any given circuit queue which
 would indicate that we queued stuff but weren't suppose if the tor client
 was acting normally.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25226#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online