aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorDavid Goulet <dgoulet@torproject.org>2022-04-14 09:34:49 -0400
committerDavid Goulet <dgoulet@torproject.org>2022-04-14 09:34:49 -0400
commitb33f69abb54d06b324301977e87171d5902a39bf (patch)
tree4dcaad819c29d7ad1fe574ac54054ef6d28e6d6f /changes
parentb4890e753459bb1aeb1c258e98fdb2c598bb1369 (diff)
parent9ac479ce1c20fd2e58528900b54d5b81bedb641d (diff)
downloadtor-b33f69abb54d06b324301977e87171d5902a39bf.tar.gz
tor-b33f69abb54d06b324301977e87171d5902a39bf.zip
Merge branch 'maint-0.4.5' into maint-0.4.6
Diffstat (limited to 'changes')
-rw-r--r--changes/bug404726
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug40472 b/changes/bug40472
new file mode 100644
index 0000000000..d87c1dc2cc
--- /dev/null
+++ b/changes/bug40472
@@ -0,0 +1,6 @@
+ o Minor bugfixes (performance, DoS):
+ - Fix one case of a not-especially viable denial-of-service attack found
+ by OSS-Fuzz in our consensus-diff parsing code. This attack causes a
+ lot small of memory allocations and then immediately frees them: this
+ is only slow when running with all the sanitizers enabled. Fixes one
+ case of bug 40472; bugfix on 0.3.1.1-alpha.