when the dns resolve is cancelled, or fails, be sure to remove

conn from circ->resolving_streams

otherwise it gets freed and stays there, causing seg faults.

svn:r1915

diff --git a/src/or/circuitlist.c b/src/or/circuitlist.c
index 9cdfb809be06aef09726f5c91482562edcc9cda4..e87931f52e5bee0730d909c29d0764a95f45e77d 100644 (file)
--- a/src/or/circuitlist.c
+++ b/src/or/circuitlist.c
@@ -200,7 +200,7 @@ circuit_t *circuit_get_by_circ_id_conn(uint16_t circ_id, connection_t *conn) {
 }
 
 /** Return a circ such that circ is attached to <b>conn</b>, either as
- * p_conn, n-conn, or in p_streams or n_streams.
+ * p_conn, n-conn, or in p_streams or n_streams or resolving_streams.
  *
  * Return NULL if no such circuit exists.
  */

diff --git a/src/or/connection.c b/src/or/connection.c
index e868a43bf9417fa3e68f2fb504d20ac5e44ddc7e..90bcd83a3c886fc1ce4d6e5bcae59831c7805528 100644 (file)
--- a/src/or/connection.c
+++ b/src/or/connection.c
@@ -208,8 +208,10 @@ void connection_about_to_close_connection(connection_t *conn)
       }
       break;
     case CONN_TYPE_EXIT:
-      if (conn->state == EXIT_CONN_STATE_RESOLVING)
+      if (conn->state == EXIT_CONN_STATE_RESOLVING) {
+        circuit_detach_stream(circuit_get_by_conn(conn), conn);
         connection_dns_remove(conn);
+      }
       break;
     case CONN_TYPE_DNSWORKER:
       if (conn->state == DNSWORKER_STATE_BUSY) {

diff --git a/src/or/dns.c b/src/or/dns.c
index f00868d9f1750e42c32c87afdca136df42341ce2..0106c4d8142e3b10d11fc3e38211e82e916c267e 100644 (file)
--- a/src/or/dns.c
+++ b/src/or/dns.c
@@ -436,6 +436,7 @@ static void dns_found_answer(char *address, uint32_t addr, char outcome) {
                                 connection_mark_for_close macro */
       /* prevent double-remove. */
       pendconn->state = EXIT_CONN_STATE_RESOLVEFAILED;
+      circuit_detach_stream(circuit_get_by_conn(pendconn), pendconn);
       connection_edge_end(pendconn, END_STREAM_REASON_MISC, pendconn->cpath_layer);
       connection_mark_for_close(pendconn);
       connection_free(pendconn);