aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2016-02-11 12:55:40 -0500
committerNick Mathewson <nickm@torproject.org>2016-02-11 12:55:40 -0500
commitce289e2cb5099a4abe4468049dc0d262b65bfa17 (patch)
tree5d7307451562bb7d5a0bc683698e9a06578f37cd /changes
parentf06d9a9cef036fc4da995f3ffda8e7a7770d0b74 (diff)
parentad95d64fece2c6d2eddffc8fa5178c3ffccc0cd7 (diff)
downloadtor-ce289e2cb5099a4abe4468049dc0d262b65bfa17.tar.gz
tor-ce289e2cb5099a4abe4468049dc0d262b65bfa17.zip
Merge branch 'maint-0.2.4' into maint-0.2.5
Diffstat (limited to 'changes')
-rw-r--r--changes/bug181627
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug18162 b/changes/bug18162
new file mode 100644
index 0000000000..0844d6f62f
--- /dev/null
+++ b/changes/bug18162
@@ -0,0 +1,7 @@
+ o Major bugfixes (security, pointers):
+
+ - Avoid a difficult-to-trigger heap corruption attack when extending
+ a smartlist to contain over 16GB of pointers. Fixes bug #18162;
+ bugfix on Tor 0.1.1.11-alpha, which fixed a related bug
+ incompletely. Reported by Guido Vranken.
+