summaryrefslogtreecommitdiff
path: root/changes/bug17404
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2017-02-07 08:38:59 -0500
committerNick Mathewson <nickm@torproject.org>2017-02-07 08:38:59 -0500
commit05ec055c417c80bf7b13914fade70a72f11accc5 (patch)
tree25c0779abbcda5c23f7547fd5a33adfc6e9117f1 /changes/bug17404
parent332543baedcf651b75722e5d4626c62fdd24ef60 (diff)
parent51675f97d30e48da68f2cf538f7f805f51af4c36 (diff)
downloadtor-05ec055c417c80bf7b13914fade70a72f11accc5.tar.gz
tor-05ec055c417c80bf7b13914fade70a72f11accc5.zip
Merge branch 'maint-0.2.4' into maint-0.2.5
Diffstat (limited to 'changes/bug17404')
-rw-r--r--changes/bug174046
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug17404 b/changes/bug17404
new file mode 100644
index 0000000000..d524f6662d
--- /dev/null
+++ b/changes/bug17404
@@ -0,0 +1,6 @@
+ o Major bugfixes (security, correctness):
+ - Fix a programming error that could cause us to read 4 bytes before
+ the beginning of an openssl string. This could be used to provoke
+ a crash on systems with an unusual malloc implementation, or
+ systems with unsual hardening installed. Fixes bug 17404; bugfix
+ on 0.2.3.6-alpha.