[tor-bugs] #12848 [Tor]: Tor wrongly process circuit as connected to n_chan if create cell delivery failed

[Tor Bug Tracker & Wiki]

#12848: Tor wrongly process circuit as connected to n_chan if create cell delivery
failed
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  cypherpunks            |     Status:  needs_review
         Type:  defect   |  Milestone:  Tor: 0.2.5.x-final
     Priority:  normal   |    Version:  Tor: 0.2.5.5-alpha
    Component:  Tor      |   Keywords:  tor-relay 024-backport 023-backport
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by cypherpunks):

 >  What do you think?
 I'm worrying about 0044d74b3c51cf5824435e76eca2a675b51a14bc actually.
 If circuit_send_next_onion_skin() failed after call of
 circuit_set_n_circid_chan() by circuit_deliver_create_cell() then pointer
 to circuit will stuck in chan-circid map.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12848#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online