tor

commit 0bd4cd8101422e0f3604cdf80e28ec4e8ac67877
parent 66597b9291eb95203c0d84fb38f9a9561b4c8d85
Author: Alexander Færøy <ahf@torproject.org>
Date:   Wed, 16 Dec 2020 20:55:03 +0000

Merge remote-tracking branch 'tor-gitlab/mr/230'

Diffstat:
A
changes/ticket40017_redux
 | 
4
++++
M
src/core/or/connection_or.c
 | 
5
+++++

2 files changed, 9 insertions(+), 0 deletions(-)
diff --git a/changes/ticket40017_redux b/changes/ticket40017_redux
@@ -0,0 +1,3 @@
+  o Minor features (protocol, proxy support, defense in depth):
+    - Close HAProxy connections if they somehow manage to send us data before
+      we start reading.  Closes another case of ticket 40017.
+\ No newline at end of file
diff --git a/src/core/or/connection_or.c b/src/core/or/connection_or.c
@@ -686,6 +686,11 @@ connection_or_finished_flushing(or_connection_t *conn)
       /* PROXY_HAPROXY gets connected by receiving an ack. */
       if (conn->proxy_type == PROXY_HAPROXY) {
         tor_assert(TO_CONN(conn)->proxy_state == PROXY_HAPROXY_WAIT_FOR_FLUSH);
+        IF_BUG_ONCE(buf_datalen(TO_CONN(conn)->inbuf) != 0) {
+          /* This should be impossible; we're not even reading. */
+          connection_or_close_for_error(conn, 0);
+          return -1;
+        }
         TO_CONN(conn)->proxy_state = PROXY_CONNECTED;
 
         if (connection_tls_start_handshake(conn, 0) < 0) {