commit 18845c550722d5fa7d68bdee6a5e2090acb89a6f Author: Nick Mathewson nickm@torproject.org Date: Fri Jul 19 09:49:35 2013 -0400

Initialize destroy_cell_queue.

Likely fix for the crash bug of #9296, which was introduced through a combination of #7912 and #8586. Bugfix not in any released Tor. --- src/or/circuitmux.c | 1 + 1 file changed, 1 insertion(+)

diff --git a/src/or/circuitmux.c b/src/or/circuitmux.c index 77cb2f9..47b4230 100644 --- a/src/or/circuitmux.c +++ b/src/or/circuitmux.c @@ -383,6 +383,7 @@ circuitmux_alloc(void) rv = tor_malloc_zero(sizeof(*rv)); rv->chanid_circid_map = tor_malloc_zero(sizeof(*( rv->chanid_circid_map))); HT_INIT(chanid_circid_muxinfo_map, rv->chanid_circid_map); + cell_queue_init(&rv->destroy_cell_queue);

return rv; }