[tor-bugs] #9017 [Tor]: Crash in assert_connection_ok

[Tor Bug Tracker & Wiki]

#9017: Crash in assert_connection_ok
----------------------+-----------------------------------------------------
 Reporter:  usuality  |          Owner:                   
     Type:  defect    |         Status:  needs_information
 Priority:  major     |      Milestone:                   
Component:  Tor       |        Version:  Tor: 0.2.3.25    
 Keywords:            |         Parent:                   
   Points:            |   Actualpoints:                   
----------------------+-----------------------------------------------------

Comment(by usuality):

 Oops, that wasn't actually the crash.  Here it is:

 {{{
 connection.c:4066 assert_connection_ok: Assertion (conn->type ==
 CONN_TYPE_EXIT && conn->state == EXIT_CONN_STATE_RESOLVING) ||
 connection_is_writing(conn) || conn->write_blocked_on_bw ||
 (CONN_IS_EDGE(conn) && TO_EDGE_CONN(conn)->edge_blocked_on_circ) failed;
 aborting.

 Program received signal SIGABRT, Aborted.
 0x00000bfba90c074a in kill () at <stdin>:2
 2       <stdin>: No such file or directory.
         in <stdin>
 (gdb) where
 #0  0x00000bfba90c074a in kill () at <stdin>:2
 #1  0x00000bfba91247ca in abort () at /usr/src/lib/libc/stdlib/abort.c:70
 #2  0x00000bf99b9c650c in assert_connection_ok (conn=0xbfba11eef00, now=0)
 at connection.c:4061
 #3  0x00000bf99b9bd720 in _connection_mark_for_close (conn=0xbfba11eef00,
 line=1172,
     file=0xbf99bb55f5b "relay.c") at connection.c:673
 #4  0x00000bf99b92efe5 in connection_edge_process_relay_cell
 (cell=0x7f7ffffc8870, circ=0xbfba42e7e00,
     conn=0xbfba11eef00, layer_hint=0x0) at relay.c:1172
 #5  0x00000bf99b92b647 in circuit_receive_relay_cell (cell=0x7f7ffffc8870,
 circ=0xbfba42e7e00,
     cell_direction=CELL_DIRECTION_OUT) at relay.c:192
 #6  0x00000bf99b9a493a in command_process_relay_cell (cell=0x7f7ffffc8870,
 conn=0xbfba2a15200)
     at command.c:576
 #7  0x00000bf99b9a378e in command_process_cell (cell=0x7f7ffffc8870,
 conn=0xbfba2a15200) at command.c:192
 #8  0x00000bf99b9d7551 in connection_or_process_cells_from_inbuf
 (conn=0xbfba2a15200) at connection_or.c:1882
 #9  0x00000bf99b9d3e32 in connection_or_process_inbuf (conn=0xbfba2a15200)
 at connection_or.c:395
 #10 0x00000bf99b9c5231 in connection_process_inbuf (conn=0xbfba2a15200,
 package_partial=1)
     at connection.c:3827
 #11 0x00000bf99b9c2b3a in connection_handle_read_impl (conn=0xbfba2a15200)
 at connection.c:2706
 #12 0x00000bf99b9c2c48 in connection_handle_read (conn=0xbfba2a15200) at
 connection.c:2748
 #13 0x00000bf99b9112d0 in conn_read_callback (fd=130, event=2,
 _conn=0xbfba2a15200) at main.c:705
 #14 0x00000bfba33f1a38 in event_base_loop (base=0xbfba6ca0c00,
 flags=Variable "flags" is not available.
 ) at /usr/src/lib/libevent/event.c:402
 #15 0x00000bf99b913cae in do_main_loop () at main.c:1959
 #16 0x00000bf99b915341 in tor_main (argc=1, argv=0x7f7ffffc9000) at
 main.c:2652
 #17 0x00000bf99b90f8ab in main (argc=1, argv=0x7f7ffffc9000) at
 tor_main.c:30
 (gdb)
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9017#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online