diff options
author | Nick Mathewson <nickm@torproject.org> | 2011-01-10 12:12:11 -0500 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2011-01-10 12:12:11 -0500 |
commit | 373a1bc40e88d90e75f4a70b7d2018fe7288035a (patch) | |
tree | 4a95e8ab3eb5bc7b94d7681dfd6166ea2bb0ac96 /changes/bug2352 | |
parent | 729f404efec0795f7ed358e7b2fa08bd62cc1ae8 (diff) | |
download | tor-373a1bc40e88d90e75f4a70b7d2018fe7288035a.tar.gz tor-373a1bc40e88d90e75f4a70b7d2018fe7288035a.zip |
Impose maximum sizes on parsed objects
An object, you'll recall, is something between -----BEGIN----- and
-----END----- tags in a directory document. Some of our code, as
doorss has noted in bug 2352, could assert if one of these ever
overflowed SIZE_T_CEILING but not INT_MAX. As a solution, I'm setting
a maximum size on a single object such that neither of these limits
will ever be hit. I'm also fixing the INT_MAX checks, just to be sure.
Diffstat (limited to 'changes/bug2352')
-rw-r--r-- | changes/bug2352 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug2352 b/changes/bug2352 new file mode 100644 index 0000000000..744dbdb20f --- /dev/null +++ b/changes/bug2352 @@ -0,0 +1,6 @@ + o Minor bugfixes + - Fix some potential asserts and partsing issues with grossly + malformed router caches. Fixes bug 2352. Found by doorss. + Bugfix on Tor 0.2.1.27. + + |