diff options
| author | Nick Mathewson <nickm@torproject.org> | 2018-02-01 16:33:52 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2018-03-01 16:05:17 -0500 |
| commit | 65f2eec694f18a64291cc85317b9f22dacc1d8e4 (patch) | |
| tree | 661e118d2f06c17c02ea0688c27ba424c2bab07e /changes | |
| parent | cb92d47deca15c44dd52cad6fc326520648c632e (diff) | |
| download | tor-65f2eec694f18a64291cc85317b9f22dacc1d8e4.tar.gz tor-65f2eec694f18a64291cc85317b9f22dacc1d8e4.zip | |
Correctly handle NULL returns from parse_protocol_list when voting.
In some cases we had checked for it, but in others we had not. One
of these cases could have been used to remotely cause
denial-of-service against directory authorities while they attempted
to vote.
Fixes TROVE-2018-001.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/trove-2018-001.1 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/trove-2018-001.1 b/changes/trove-2018-001.1 new file mode 100644 index 0000000000..f0ee92f409 --- /dev/null +++ b/changes/trove-2018-001.1 @@ -0,0 +1,6 @@ + o Major bugfixes (denial-of-service, directory authority): + - Fix a protocol-list handling bug that could be used to remotely crash + directory authorities with a null-pointer exception. Fixes bug 25074; + bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001. + + |