diff options
author | Nick Mathewson <nickm@torproject.org> | 2010-02-27 16:33:46 -0500 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2010-02-27 17:07:05 -0500 |
commit | 27a8a56e6c33609c3da4a39b2b564c9eca54f1d4 (patch) | |
tree | 31254f51a2b7a8f46977e47441157d6267ae32e9 /ChangeLog | |
parent | 1c25077b1ced61ef9b4179d9718959e678794900 (diff) | |
download | tor-27a8a56e6c33609c3da4a39b2b564c9eca54f1d4.tar.gz tor-27a8a56e6c33609c3da4a39b2b564c9eca54f1d4.zip |
Fix a consensus-extension bug found by outofwords
When the bandwidth-weights branch added the "directory-footer"
token, and began parsing the directory footer at the first
occurrence of "directory-footer", it made it possible to fool the
parsing algorithm into accepting unsigned data at the end of a
consensus or vote. This patch fixes that bug by treating the footer
as starting with the first "directory-footer" or the first
"directory-signature", whichever comes first.
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -5,7 +5,9 @@ Changes in version 0.2.2.10-alpha - 2010-??-?? and Guard+Exit flagged nodes for entry, middle, and exit positions. This should more evenly distribute the network load across these different types of nodes, and give us the flexibility to globally - alter our node selection algorithms in the future. + alter our node selection algorithms in the future. Extra thanks + to "outofwords" for finding some nasty security bugs in the + first implementation of this. o Minor features (performance): - Always perform router selections using weighted node bandwidth, |