summaryrefslogtreecommitdiff
path: root/ChangeLog
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2010-02-27 16:33:46 -0500
committerNick Mathewson <nickm@torproject.org>2010-02-27 17:07:05 -0500
commit27a8a56e6c33609c3da4a39b2b564c9eca54f1d4 (patch)
tree31254f51a2b7a8f46977e47441157d6267ae32e9 /ChangeLog
parent1c25077b1ced61ef9b4179d9718959e678794900 (diff)
downloadtor-27a8a56e6c33609c3da4a39b2b564c9eca54f1d4.tar.gz
tor-27a8a56e6c33609c3da4a39b2b564c9eca54f1d4.zip
Fix a consensus-extension bug found by outofwords
When the bandwidth-weights branch added the "directory-footer" token, and began parsing the directory footer at the first occurrence of "directory-footer", it made it possible to fool the parsing algorithm into accepting unsigned data at the end of a consensus or vote. This patch fixes that bug by treating the footer as starting with the first "directory-footer" or the first "directory-signature", whichever comes first.
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog4
1 files changed, 3 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 6a324e9728..ab11ddb6d5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,7 +5,9 @@ Changes in version 0.2.2.10-alpha - 2010-??-??
and Guard+Exit flagged nodes for entry, middle, and exit positions.
This should more evenly distribute the network load across these
different types of nodes, and give us the flexibility to globally
- alter our node selection algorithms in the future.
+ alter our node selection algorithms in the future. Extra thanks
+ to "outofwords" for finding some nasty security bugs in the
+ first implementation of this.
o Minor features (performance):
- Always perform router selections using weighted node bandwidth,