Reject multicast rendezvous point addresses

Unless ExtendAllowPrivateAddresses is 1.

diff --git a/src/or/circuitbuild.c b/src/or/circuitbuild.c
index 6a3c16497e0467e87610e4419bc7f7a17865c9ee..2e91f9440da0f1d2bde56af8c91d854c5f747d6b 100644 (file)
--- a/src/or/circuitbuild.c
+++ b/src/or/circuitbuild.c
@@ -2409,7 +2409,7 @@ int extend_info_addr_is_allowed(const tor_addr_t *addr)
   tor_assert(addr);
 
   /* Check if we have a private address and if we can extend to it. */
-  if (tor_addr_is_internal(addr, 0) &&
+  if ((tor_addr_is_internal(addr, 0) || tor_addr_is_multicast(addr)) &&
       !get_options()->ExtendAllowPrivateAddresses) {
     goto disallow;
   }