Disable middle relay queue overfill detection code due to possible guard discovery attack

This commit is contained in:
Andrea Shepard
2013-06-15 02:16:00 -07:00
parent d780cd5fd4
commit 2a95f31716
2 changed files with 8 additions and 0 deletions
+3
View File
@@ -0,0 +1,3 @@
o Critical bugfixes:
- Disable middle relay queue overfill detection code due to possible
guard discovery attack, pending further analysis. Fixes bug #9072.
+5
View File
@@ -2548,6 +2548,10 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn,
streams_blocked = circ->streams_blocked_on_p_conn;
}
/*
* Disabling this for now because of a possible guard discovery attack
*/
#if 0
/* Are we a middle circuit about to exceed ORCIRC_MAX_MIDDLE_CELLS? */
if ((circ->n_conn != NULL) && CIRCUIT_IS_ORCIRC(circ)) {
orcirc = TO_OR_CIRCUIT(circ);
@@ -2566,6 +2570,7 @@ append_cell_to_circuit_queue(circuit_t *circ, or_connection_t *orconn,
}
}
}
#endif
cell_queue_append_packed_copy(queue, cell);