aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2013-01-15 16:30:26 -0500
committerNick Mathewson <nickm@torproject.org>2013-01-15 16:30:26 -0500
commit938cb6a55e05751a30e50f744bc568b27812a344 (patch)
tree50a9b1b37f0b02ce8bfaf2befbc2b995113a6781 /changes
parentc134bb5a8d10d0f422b790ce8b587cf7188aa57e (diff)
parentae15b55173abff1175e0f56759abd29e2870b16c (diff)
downloadtor-938cb6a55e05751a30e50f744bc568b27812a344.tar.gz
tor-938cb6a55e05751a30e50f744bc568b27812a344.zip
Merge remote-tracking branch 'origin/maint-0.2.3'
Diffstat (limited to 'changes')
-rw-r--r--changes/bug78898
1 files changed, 8 insertions, 0 deletions
diff --git a/changes/bug7889 b/changes/bug7889
new file mode 100644
index 0000000000..ce99a59ce5
--- /dev/null
+++ b/changes/bug7889
@@ -0,0 +1,8 @@
+ o Major bugfixes:
+ - Reject bogus create and relay cells with 0 circuit ID or 0 stream
+ ID: these could be used to create unexpected streams and circuits
+ which would count as "present" to some parts of Tor but "absent"
+ to others, leading to zombie circuits and streams or to a
+ bandwidth DOS. Fixes bug 7889; bugfix on every released version of
+ Tor. Reported by "oftc_must_be_destroyed".
+