[tor-bugs] #12848 [Tor]: Tor wrongly process circuit as connected to n_chan if create cell delivery failed

[Tor Bug Tracker & Wiki]

#12848: Tor wrongly process circuit as connected to n_chan if create cell delivery
failed
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  cypherpunks            |     Status:  needs_review
         Type:  defect   |  Milestone:  Tor: 0.2.5.x-final
     Priority:  normal   |    Version:  Tor: 0.2.5.5-alpha
    Component:  Tor      |   Keywords:  tor-relay 024-backport 023-backport
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by cypherpunks):

 > How did you find this?
 By reading code, after I saw it in my last night dream. I assumed "No
 unused circIDs found on channel" can be result of real out of ID space
 without any software bug, but then triggers some another looking a like
 memory corruption bugs.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12848#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online