aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2016-02-11 12:55:25 -0500
committerNick Mathewson <nickm@torproject.org>2016-02-11 12:55:25 -0500
commitad95d64fece2c6d2eddffc8fa5178c3ffccc0cd7 (patch)
tree1151f5d31e5c333010ea6e23697c384bac000a38 /changes
parentd5ac79e056bdb740adecf45ef3b50d1c16cf394f (diff)
parentc2fd64846978290b0e7c7165d7658a5e704eee8f (diff)
downloadtor-ad95d64fece2c6d2eddffc8fa5178c3ffccc0cd7.tar.gz
tor-ad95d64fece2c6d2eddffc8fa5178c3ffccc0cd7.zip
Merge branch 'bug18162_024' into maint-0.2.4
Diffstat (limited to 'changes')
-rw-r--r--changes/bug181627
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug18162 b/changes/bug18162
new file mode 100644
index 0000000000..0844d6f62f
--- /dev/null
+++ b/changes/bug18162
@@ -0,0 +1,7 @@
+ o Major bugfixes (security, pointers):
+
+ - Avoid a difficult-to-trigger heap corruption attack when extending
+ a smartlist to contain over 16GB of pointers. Fixes bug #18162;
+ bugfix on Tor 0.1.1.11-alpha, which fixed a related bug
+ incompletely. Reported by Guido Vranken.
+