aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-12-23 10:55:25 -0500
committerNick Mathewson <nickm@torproject.org>2014-12-23 10:55:25 -0500
commit184a2dbbdd27f958f5ac290fe030d1fac2959157 (patch)
treea913b85498335a97c3a57f7deaea4e3ac90d5308
parent6d728ba8801031b27937436cbcad033f4406a8b5 (diff)
downloadtor-184a2dbbdd27f958f5ac290fe030d1fac2959157.tar.gz
tor-184a2dbbdd27f958f5ac290fe030d1fac2959157.zip
whoops; missing changes file for 14013
-rw-r--r--changes/bug140136
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug14013 b/changes/bug14013
new file mode 100644
index 0000000000..640cf859f5
--- /dev/null
+++ b/changes/bug14013
@@ -0,0 +1,6 @@
+ o Major bugfixes:
+ - When reading a hexadecimal, base-32, or base-64 encoded value
+ from a string, always overwrite the complete output buffer. This
+ prevents some bugs where we would look at (but fortunately, not
+ reveal) uninitialized memory on the stack. Fixes bug 14013;
+ bugfix on all versions of Tor.