From: Nick Mathewson <nickm@torproject.org>
Date: Fri, 19 Jul 2013 13:49:35 +0000 (-0400)
Subject: Initialize destroy_cell_queue.
X-Git-Tag: tor-0.2.5.1-alpha~97^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=18845c550722d5fa7d68bdee6a5e2090acb89a6f;p=thirdparty%2Ftor.git

Initialize destroy_cell_queue.

Likely fix for the crash bug of #9296, which was introduced through a
combination of #7912 and #8586.  Bugfix not in any released Tor.
---

diff --git a/src/or/circuitmux.c b/src/or/circuitmux.c
index 77cb2f98bc..47b423066a 100644
--- a/src/or/circuitmux.c
+++ b/src/or/circuitmux.c
@@ -383,6 +383,7 @@ circuitmux_alloc(void)
   rv = tor_malloc_zero(sizeof(*rv));
   rv->chanid_circid_map = tor_malloc_zero(sizeof(*( rv->chanid_circid_map)));
   HT_INIT(chanid_circid_muxinfo_map, rv->chanid_circid_map);
+  cell_queue_init(&rv->destroy_cell_queue);
 
   return rv;
 }