| commit | 733751009058a8ff140c15ddd8b022da6a77afdd | |
| author | Sebastian Hahn <sebastian@torproject.org> | |
| Mon, 9 Feb 2015 15:04:51 +0000 (9 16:04 +0100) | ||
| committer | Sebastian Hahn <sebastian@torproject.org> | |
| Mon, 9 Feb 2015 15:12:47 +0000 (9 16:12 +0100) | ||
| tree | 7b750594dd2143cb1f57aa6939f11743e20cfbad | treesnapshot (tar.gz zip) |
| parent | 37d16c3cc78151daf2cbebd643ea4d64b504989e | commitdiff |
Avoid use-after-free of circ belonging to cancelled job
This fixes a bug where we decide to free the circuit because it isn't on
any workqueue anymore, and then the job finishes and the circuit gets
freed again.
Fixes bug #14815, not in any released version of Tor.
This fixes a bug where we decide to free the circuit because it isn't on
any workqueue anymore, and then the job finishes and the circuit gets
freed again.
Fixes bug #14815, not in any released version of Tor.
| src/or/cpuworker.c | diffblobblamehistory |