[tor-bugs] #12860 [Tor]: "Couldn't format create cell" warning can be triggered remotely for relayed cells

[Tor Bug Tracker & Wiki]

#12860: "Couldn't format create cell" warning can be triggered remotely for relayed
cells
-----------------------------+-----------------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor          |    Version:
   Resolution:               |   Keywords:  tor-relay
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------

Comment (by cypherpunks):

 Unless it checked before by circuit_extend()
 {{{
   if (extend_cell_parse(&ec, rh.command,
                         cell->payload+RELAY_HEADER_SIZE,
                         rh.length) < 0) {
     log_fn(LOG_PROTOCOL_WARN, LD_PROTOCOL,
            "Can't parse extend cell. Closing circuit.");
     return -1;
   }
 }}}
 Then bug is invalid.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12860#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online