[tor-bugs] #15083 [Tor]: Assertion ch->data < &ch->mem[0]+ch->memlen failed

[Tor Bug Tracker & Wiki]

#15083: Assertion ch->data < &ch->mem[0]+ch->memlen failed
------------------------+------------------------------------
     Reporter:  poiuty  |      Owner:
         Type:  defect  |     Status:  new
     Priority:  major   |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:  Tor: 0.2.5.10
   Resolution:          |   Keywords:  025-backport tor-relay
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------------

Comment (by cypherpunks):

 {{{
 --- tor-0.2.5.10/src/or/buffers.c       2014-10-10 06:06:24.000000000
 -0700
 +++ tor-0.2.5.10/src/or/buffers.c.modified      2015-03-03
 03:07:20.754704418 -0800
 @@ -447,7 +447,7 @@
      size_t n = bytes - dest->datalen;
      src = dest->next;
      tor_assert(src);
 -    if (n > src->datalen) {
 +    if (n >= src->datalen) {
        memcpy(CHUNK_WRITE_PTR(dest), src->data, src->datalen);
        dest->datalen += src->datalen;
        dest->next = src->next;
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15083#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online